Note - CUTS Geneva

BrazilSocial media platformsand digital apps should“inform consumers ofthe use of their personalinformation”Measures should betaken to preventfraudulent commercialactivities and giveredress to consumersData privacy requiresinternationalcooperationMembers should formframeworks for personaldata protection andpublish informationabout them46INF/ECOM/32 p.3INF/ECOM/26, p. 248INF/ECOM/3149INF/ECOM/3150INF/ECOM/25, p. 547Chinameasures they deemnecessaryNo unsolicitedelectronic commercialmessages tononconsentingconsumersMembers should“publish information onthe personal informationprotections theyprovide”46 including howindividuals may pursueredress and businessescan comply withrequirementsOnline consumersshould be protectedsimilarly to otherconsumersJudicial proceduresshould be maintained tosolve disputes betweenconsumers and ecommerce providersMembers shouldincrease cooperationbetween nationalconsumer protectionagenciesChinese TaipeiHong Kongdeceptive commercialpractices”47National consumerprotection agenciesshould cooperate atthe international levelMembers shouldcreate legalframeworks to protectusers’ personalinformationRedress andcomplianceinformation forindividuals andbusinesses should bepublishedRegarding unsolicitedcommercial electronicmessages:consumers should begiven the option ofopting out ofmessages, orconsumer consentmust be requiredbefore sendingmessagesRepublic ofKoreaconsumers engagedin other forms oftransaction”48An Online DisputeResolution (ODF)scheme should beestablished by eachpartyNational consumerprotection agenciesshould cooperate atthe international levelParties “shouldpublish information onthe personalinformationprotections itprovides”49 includinghow individuals canget redress andbusiness complianceguidelinesParties shouldestablish regulationson unsolicitedcommercial electronicmessagesSingaporeconsent must beobtained“Members shall providerecourse” against noncomplying suppliers50Members shouldprovide legalframeworks forprotecting personalinformation of ecommerce usersInformation regardingredress and compliancefor individuals andbusinesses shall bepublishedMembers shouldrecognize the differinglegal frameworks ofother membersregarding personalinformation protection

BrazilOnline SecurityChinese TaipeiHong KongRepublic ofKoreaConsumers usingelectronic commerceshould be givenprotection like that ofother consumersMembers shouldincrease cooperationand share bestpractices regardingcybersecurityParties shouldincrease capabilitiesof bodies in charge ofcomputer securityParties shouldcollaborate to identifythe “dissemination ofmalicious code thataffects the electronicnetworks”51Data LocalizationThe negotiations shouldnot include the issues ofdata flow or datastorage or treatment ofdigital products at thistime, due to differingviews of Members53Parties shall not“require a coveredperson to use orlocate computingfacilities in thatParty’s territory as acondition forconducting businessin that territory”unless suchmeasures are neededfor “legitimate publicpolicy objectives”54Developing Countriesand LDCs’ interestsNegotiation objectivesto assist developing andLDC members to“integrate into globalvalue chains, bridge thedigital divide” and helpmake trade moreinclusive51INF/ECOM/31 p. 7INF/ECOM/25, p.653INF/ECOM/1954INF/ECOM/31 p.655INF/ECOM/25, p.352Internationalcooperation needed onmatters of cybersecurityMembers should buildcybersecurity responsecapacitiesChinaSingaporeMembers shouldprovide consumerprotection through lawsagainst “fraudulent anddeceptive commercialactivities”52Internationalcooperation betweennational consumerprotection agencies iscrucial“Members shall notrequire the use orlocation of computingfacilities in its territoryas a condition forconducting business inthat territory” except inthe case of meeting “alegitimate public policyobjective”55

BrazilChinaChinese TaipeiHong KongRepublic ofKoreaSingaporeAn ElectronicCommerce forDevelopment programshould be created underthe WTO framework toassist LDCs anddeveloping membersInclusion (MSMEs andwomen)Digital F/ECOM/25, p. 2It is important forMSMEs to increasetheir digital tradeparticipationThe negotiations shouldnot include the issues ofdata flow or datastorage or treatment ofdigital products at thistime, due to differingviews of Members56“this negotiation shouldbe complementary tothe electroniccommerce discussion inrelevant subsidiarybodies of the WTO” andthese bodies “should beinformed of negotiationprogress”The connectionbetween current andpast agreements shouldbe clarifiedMembers’ legalframeworks should be“consistent with theprinciples of theUNCITRAL ModelLaw on ElectronicCommerce 1996 orthe United NationsConvention on theUse of ElectronicCommunications inInternationalContracts”Members’ legalframeworks should be“consistent with theprinciples of theUNCITRAL Model Lawon ElectronicCommerce 1996 or theUnited NationsConvention of the Useof ElectronicCommunications inInternational Contracts,2005”57

Table 2. Proposals from Developed Countries and Economies in TransitionInfrastructurefor ElectronicTradeCanadaEuropean UnionConsumers should beable to “access anduse services andapplications” of theirchoice, “subject toreasonable networkmanagement”64Open internet accessshould be maintainedin Members’ territoriesOpen tradingenvironment/trade facilitation58INF/ECOM/29, INF/ECOM/2363INF/ECOM/2864INF/ECOM/30, Article 265INF/ECOM/20, p. 666INF/ECOM/28 p.467INF/ECOM/20 p. 668INF/ECOM/23 p.559JapanNew ZealandUnited StatesConsumers should havethe ability to accessinformation andservices on the internet“subject to reasonablenetwork management”65Open cross-borderelectronic transfer ofinformation when it isfor business purposesbetween members(Exception: membersmay apply restrictionswhen needed for “alegitimate public policyobjective”67Members shouldincrease public accessof government dataUkraineCustomers should havethe ability to accessinformation andservices on the internet“subject to reasonablenetwork management”66Cross-borderelectronic informationtransfer should not berestricted if it is forbusiness purposes(unless the restrictionsare for “legitimatepublic policyobjective(s)” and arenot a “disguisedrestriction on trade”68Government data,when publiclyavailable, should beGovernment data that ispublicly available shouldbe searchable andusable

CanadaElectronicPayments,Contracts, andPaperlessTradingElectronic signaturesshould not be deniedlegal validityParties should not beprevented fromnegotiating the bestauthenticationmethods for theirtransaction and shouldnot be prevented fromdefending the legalityof their transactionbefore the relevantauthoritiesParties may requirespecific certification orperformance standardsfor certain types oftransactionsCustoms DutiesNo imposition oncustom duties forelectronicallytransmitted digitalproductsMembers may haveinternal fees on digitalproductsEuropean UnionElectronic contractsshould not be deniedlegality solely becausethey are in electronicform69Parties may negotiatethe best authenticationmethods for theirtransaction and shouldnot be prevented fromproving the legality oftheir authentication tothe relevant authoritiesMembers may requirespecific certificationstandards for differenttypes of transactions,provided standards are“objective, transparent,and nondiscriminatory”70JapanNew ZealandUnited StatesUkraineAny government datathat is made publicshould be available in ausable formElectronic signaturesshould be legallyaccepted unlessdomestic regulationsspecify otherwiseParties should beallowed to negotiate thebest authenticationmethods for theirtransaction and shouldnot be prevented fromproving the legality oftheir authenticationmethods to relevantauthoritiesElectronic tradeadministrationdocuments should bemade publicly availableand legally acceptablepresented in a usableformElectronic signaturesshould be legallyacceptedParties should beallowed to negotiatethe best authenticationmethods for theirtransaction and shouldnot be prevented fromdefending the legalityof their transactionbefore the relevantauthoritiesMembers may requirecertain authenticationstandards for specifictypes of transactionsElectronic signaturesshould not be deniedlegal validityParties should not beprevented fromdetermining the bestauthentication methodsfor their contract or fromdefending the legality oftheir transaction beforethe relevant authoritiesMembers may requirecertain authenticationstandards for specifictypes of transactionsElectronic tradeadministrationdocuments should bemade publicly availableand legally acceptedNo customs dutiesshould be imposed onelectronic transmissionsbetween membersNo customs dutiesshould be imposed onelectronictransmissionsNo customs dutiesshould be imposed onelectronic transmissions(yet members mayimpose internal fees)Note: This statement “does not apply to broadcasting services, gambling services, legal representation services”, notaries or equivalent professions, real estate, “contracts requiring by law theinvolvement of courts, public authorities of professions exercising public authority, contracts of suretyship granted and or collateral securities furnished by persons acting for purposes outside theirtrade, business or profession and contracts governed by family law or by the law of succession” INF/ECOM/22 p.170INF/ECOM/22 p.269

CanadaEuropean rce Code71INF/ECOM/20 p.5INF/ECOM/23 p.473INF/ECOM/28 p.174INF/ECOM/22 p.375INF/ECOM/20 p.876INF/ECOM/23 p.6 Article 1277INF/ECOM/28 p.472“Members shall notrequire the transfer of,or access to, thesource code ofsoftware owned by anatural or juridicalperson of otherMembers”The above is “withoutprejudice to” cases ofviolation of competitionlaw, intellectualproperty rightsprotection, andnational securityinterests 74JapanMembers’ regulationsshould be “transparent,objective, reasonable”and designed “to meetlegitimate public policyobjectives”71Measures should bemade publicly availablein a timely fashion“No member shallrequire the transfer of,or access to sourcecode of software ownedby a person of anotherMember”Members can requiresource codemodification forcompliance “with lawsand regulations whichare not inconsistent withthis Agreement”75exceptions to nodisclosure of sourcecode: patent or courtrequirementsMembers should notrequire manufacturersor suppliers to discloseinformation or access toany technology orNew ZealandUnited StatesUkraineParties should “avoidunnecessaryregulatory burden” and“facilitate input byinterested persons inthe development of itslegal framework”72Members should “avoidunnecessary regulatoryburden on electronictransactions” and“facilitate input byinterested persons inthe development of itslegal framework”73“No party shall requirethe transfer of, oraccess to, source codeof software owned by aperson of anotherParty”76 except incases of legalinvestigations orenforcement actionNo requirements foraccess to source codeas a condition for trade(except in the cases ofachieving “a legitimatepublic policy objective,”enforcement ofintellectual propertyrights, securityconcerns, or courtrequirements77

CanadaPrivacy andConsumerProtection78INF/ECOM/22 p. 3INF/ECOM/22 p. 480INF/ECOM/22 p.781INF/ECOM/21 p. 182INF/ECOM/23 p.479European UnionJapanMeasures should betaken to ensure thatconsumers haveopportunity for redressand traders areproviding trueinformationConsumers should beprotected againstunsolicited commercialelectronic messagesby requiring consent ofthe recipient and theopportunity to opt outSuppliers should beobligated to disclose“on whose behalf[unsolicited electronicmessages] are sent”78“Members recognizethe protection ofpersonal data andprivacy is afundamental right” andrelevant safeguardsshould be applied79cryptography used in aproduct (except incases of governmentcontrolled networks andlaw enforcementmatters)Members should takeconsumer protectionmeasures against“fraudulent anddeceptive commercialactivities”80Members should createtheir own frameworksspecifying privacyprotection measuresInformation regardinghow to seek redressand how to comply withlegal regulations shouldbe publishedMembers shouldcooperate amongstthemselves to ensurethat privacy protectionframeworks arecompatibleIn the case ofunsolicited commercialelectronic messages,consumers must giveconsent to receive themNew ZealandUnited StatesMembers shouldenact consumerprotection laws toavoid harm from“misleading anddeceptive conduct”(includingmisrepresentationsand false claims,false advertising,failure to or nointention to deliverproducts,unauthorizedcharging ofconsumers’ financialor telephoneaccounts)81Members’ nationalconsumer protectionagencies shouldincrease cooperationMembers should enactregulations forprotection of personalinformationInformation regardingaccess to redress andhow businessescomply withregulations should bepublicly available“Any restrictions oncross-border flows ofpersonal information[should be] necessaryand proportionate tothe risks presented”82UkraineMembers should enactconsumer protectionlaws and increaseinternationalcooperation betweenrelevant nationalauthoritiesMembers should createframeworks for personaldata protectionMembers shoulddevelop compatiblemechanisms that allowfor increasedcooperation betweenjurisdictionsMeasures should betaken to allowconsumers to opt out orgive prior conceptbefore receivingunsolicited commercialelectronic messages

CanadaEuropean Unionor be given a way to optoutMembers should buildtheir capacity torespond tocybersecurity threatsand collaborate withother MembersOnline SecurityDataLocalizationDevelopingCountries andLDCs’ interests83INF/ECOM/23 p.5 Article 11INF/ECOM/23 p.5 Article 1185INF/ECOM/20 p.786INF/ECOM/23 p. 5 Article 987INF/ECOM/28 p.484JapanMembers should notrequire data to beprocessed atcomputing facilities intheir territoriesNo requirement of datalocalizationNo prohibition onstoring or processingdata in other Members’territories“No member shallrequire a person ofMembers to use orlocate computingfacilities in thatMember’s territory as acondition for conductingbusiness in thatterritory” except incases where “legitimatepublic policyobjective(s)” are beingmet85New ZealandUnited StatesUkraineMembers should buildtheir capacity torespond tocybersecurity threatsand “strengthenexisting s” should beimplemented forcybersecurity threatresponses84“No Party shall requirea covered person touse or locatecomputing facilities inthat Party’s territory asa condition forconducting business inthat territory”86No requirementsregarding the locationsof financial servicescomputing facilitiesMembers should buildtheir capacity torespond tocybersecurity threatsand increase existinginternationalcooperationNo requirements for thelocation of computingfacilities in a Member’sterritory (unless they areundertaken “to achievea legitimate publicpolicy objective”87)Future texts shouldinclude “appropriate andeffective special anddifferential treatment fordeveloping country

CanadaEuropean UnionJapanInclusion(MSMEs andwomen)Digital ProductsNo discrimination intreatment of digitalproducts (not applicablein cases ofbroadcasting)PastAgreements/FrameworksArticles XXII and XXIIIof GATT 1994 shouldapply to disputesettlement88INF/ECOM/28 p.5New ZealandUnited StatesInteractive computerservices should bepromoted for ecommerce growth, andare important for smalland medium-sizedenterprises (SMEs)Open government datais especially importantfor SMEsDigital products shallnot be given lessfavorable treatment(not applicable incases of subsidiessuch as governmentsupported loans orinsurance)UkraineMembers and leastdeveloped countryMembers”88Increasing publicavailability togovernment data isimportant for SMEsNo discrimination intreatment of digitalproductsWCO cross-border Ecommerce Frameworkof Standards shouldserve as a basis

Table 3: Tables of Definitions from Country Proposals89Developing er servers and storage devices for processing or storinginformation for commercial use”Computing facilityCovered financial servicesupplier“with respect to a Party, an investment in its territory of an investor ofanother Party in existence as of the date of entry into force of thisAgreement for those Parties or established, acquired, or expandedthereafter; (b) a Party, or a national or an enterprise of a Party, thatattempts to make, is making, or has made an investment in the territoryof another Party, with an exception of an investor in a financialinstitution; or (c) a person of a Party that seeks to supply of supplies aservices,”Covered personCryptographyCustoms procedure: “the treatment applied by each customs authoritiesto goods and means of transport that are subject to customs law”Customs dutyDigital productElectronic authenticationElectronic signature“the process of establishing and subsequently verifying the identity ofa party to an electronic communication or transaction or ensuring theintegrity of an electronic communication”“the process or act of establishing the identity of a party to an electroniccommunication or transaction or ensuring the integrity of an electroniccommunication”“data in electronic form that is in, affixed to, or logically associated with,an electronic document, and that may be used to identify the signatory inrelation to the INF/ECOM/31 - 2 - electronic document and indicate theSingapore’s statement on definitions: “We have excluded Definitions, Scope and General Provisions relating to the proposed disciplines below as these would be dependent on the legalarchitecture and will be determined in the course of the negotiations.” (INF/ECOM/25)90INF/ECOM/2691INF/ECOM/3189

Developing CountriesHong Kong90Korea91signatory's approval of the information contained in the electronicdocument”“a transmission made using any electromagnetic means, including byphotonic means”Electronic transmissionEncryption“any entity constituted or organized under applicable law, whether or notfor profit, and whether privately or governmentally owned or controlled,including any branch, corporation, trust, partnership, sole proprietorship,joint venture, association or similar organization”EnterpriseEssential facilitiesFinancial institution,financial institution ofanother partyFinancial marketinfrastructureFinancial serviceFinancial servicecomputing facilityFinancial service supplierof another partyFraudulent or deceptivecommercial activitiesGovernment dataGovernment procurement“non-proprietary data held by the government, except personal data”“process by which a government obtains the use of or acquires goods orservices, or any combination thereof, for governmental purposes and notwith a view to commercial sale or resale or use in the production orsupply of goods or services”Information contentproviderInteractive computerservice“the process by which a government obtains the use of or acquiresgoods or services, or any combination thereof, for governmental

Developing CountriesHong Kong90Korea91purposes and not with a view to commercial sale or resale or use in the

45 INF/ECOM/25, p. 4 . Brazil China Chinese Taipei Hong Kong Republic of Korea Singapore Social media platforms and digital apps should "inform consumers of the use of their personal information" Measures should be taken to prevent fraudulent commercial activities and give redress to consumers .