Data Localization and the GATS Public Order Exception: A Legal Examination of China's Cybersecurity Law and the Apple iCloud Guizhou Case

Yunuo Wu

doi:10.54254/2753-7048/2025.LD28364

Lecture Notes in Education Psychology and Public MediaOpen access

Data Localization and the GATS Public Order Exception: A Legal Examination of China's Cybersecurity Law and the Apple iCloud Guizhou Case

Research Article

Open Access

Data Localization and the GATS Public Order Exception: A Legal Examination of China's Cybersecurity Law and the Apple iCloud Guizhou Case

Yunuo Wu ^1*

¹ The High School Attached to Northeast University

^*Corresponding author: 18043570669@163.com

Published on 23 October 2025

LNEP Vol.128

ISSN (Print): 2753-7056

ISSN (Online): 2753-7048

ISBN (Print): 978-1-80590-449-6

ISBN (Online): 978-1-80590-450-2

Download Cover

Abstract

The rapid growth of cross-border data services has raised concerns about privacy and national security. Taking Article 37 of China's Cybersecurity Law—which underpins Apple iCloud's operational requirements in Guizhou—as a case study, this paper examines whether the policy violates Articles VI (Domestic Regulation), XVII (National Treatment), and XIV(a) (Public Order Exception) of the World Trade Organization's General Agreement on Trade in Services (GATS). Moving from general legal analysis to specific exception application, this study employs textual and case analysis to reveal that this requirement may place foreign service providers at a competitive disadvantage, violating national treatment obligations. Furthermore, it struggles to meet the necessity and minimal restriction criteria for the “public procedure exception.” Based on these findings, the paper proposes introducing risk-tiered procedures in data management, adopting alternative solutions that balance localization and security, and enhancing the certainty of WTO rules to achieve equilibrium between data sovereignty and the freedom of trade in services.

Keywords:

data localization, national treatment, cybersecurity law, GATS Article XIV, domestic regulation

View PDF

References

[1]. World Trade Organization. (1995). General Agreement on Trade in Services (GATS) — Text. https: //www.wto.org/english/docs_e/legal_e/26-gats.pdf

[2]. World Trade Organization. (1995). WTO Analytical Index, GATS — Article XVII (Jurisprudence): National Treatment. https: //www.wto.org/english/res_e/publications_e/ai17_e/gats_art17_jur.pdf

[3]. World Trade Organization. (1997). Appellate Body Report, European Communities — Regime for the Importation, Sale and Distribution of Bananas (EC — Bananas III), WT/DS27/AB/R. https: //www.wto.org/english/tratop_e/dispu_e/27abr.pdf

[4]. World Trade Organization. (1995). WTO Analytical Index, GATS — Article VI (Practice): Domestic Regulation. https: //www.wto.org/english/res_e/publications_e/ai17_e/gats_art6_oth.pdf

[5]. Creemers, R., Webster, G., & Triolo, P. (2018). Translation: Cybersecurity Law of the People’s Republic of China (Effective June 1, 2017). https: //digichina.stanford.edu/work/translation-cybersecurity-law-of-the-peoples-republic-of-china-effective-june-1-2017/

[6]. Organisation for Economic Co-operation and Development. (2019). Trade Policy Paper No. 278: The nature, evolution and potential implications of data localisation measures. https: //www.oecd.org/officialdocuments/publicdisplaydocumentpdf/?cote=TAD/TC/WP(2019)19/FINAL& docLanguage=En

[7]. Chander, A., & Le, U. P. (2014). Breaking the Web: Data Localization vs. the Global Internet. Emory Law Journal. https: //papers.ssrn.com/sol3/papers.cfm?abstract_id=2407858#paper-references-widget

[8]. Kuner, C. (2015). Data Nationalism and Its Discontents. Emory Law Journal Online. https: //scholarlycommons.law.emory.edu/elj/

[9]. Apple Inc. (2024). iCloud operated by GCBD — Terms and Conditions. https: //www.apple.com/legal/internet-services/icloud/en/gcbd-terms.html

[10]. Nellis, S., & Cadell, C. (2018). Apple moves to store iCloud keys in China, raising human rights fears. Reuters. https: //www.reuters.com/article/technology/apple-moves-to-store-icloud-keys-in-china-raising-human-rights-fears-idUSKCN1G805Z/

[11]. World Trade Organization. (1995). WTO Analytical Index, GATS — Article XIV (Jurisprudence): General Exceptions. https: //www.wto.org/english/res_e/publications_e/ai17_e/gats_art14_jur.pdf

[12]. World Trade Organization. (2005). Appellate Body Report, United States — Measures Affecting the Cross-Border Supply of Gambling and Betting Services (US — Gambling), WT/DS285/AB/R. https: //www.wto.org/english/tratop_e/dispu_e/cases/ab_reports_e.htm?WT/DS285/AB/R

[13]. Organisation for Economic Co-operation and Development. (2019). Trade Policy Paper No. 278: The nature, evolution and potential implications of data localisation measures. https: //www.oecd.org/officialdocuments/publicdisplaydocumentpdf/?cote=TAD/TC/WP(2019)19/FINAL& docLanguage=En

[14]. Mitchell, A. D., & Mishra, N. (2019). Regulating cross-border data flows in a data-driven world: how WTO law can contribute. Journal of International Economic Law, 23(1), 65-97. https: //academic.oup.com/jiel/article-abstract/23/1/65/5627761?redirectedFrom=fulltext

[15]. Savelyev, A. (2016). Russia’s new personal data localization regulations: A step forward or a self-imposed sanction? Computer Law & Security Review, 32(3), 426-440. https: //www.sciencedirect.com/science/article/abs/pii/S0267364915001703?via%3Dihub

[16]. Morgan Lewis. (2021). Data Localization Laws: Russian Federation (Q& A overview). https: //www.morganlewis.com/-/media/files/publication/outside-publication/article/2021/data-localization-laws-russian-federation.pdf

References

[1]. World Trade Organization. (1995). General Agreement on Trade in Services (GATS) — Text. https: //www.wto.org/english/docs_e/legal_e/26-gats.pdf

[2]. World Trade Organization. (1995). WTO Analytical Index, GATS — Article XVII (Jurisprudence): National Treatment. https: //www.wto.org/english/res_e/publications_e/ai17_e/gats_art17_jur.pdf

[4]. World Trade Organization. (1995). WTO Analytical Index, GATS — Article VI (Practice): Domestic Regulation. https: //www.wto.org/english/res_e/publications_e/ai17_e/gats_art6_oth.pdf

[8]. Kuner, C. (2015). Data Nationalism and Its Discontents. Emory Law Journal Online. https: //scholarlycommons.law.emory.edu/elj/

[9]. Apple Inc. (2024). iCloud operated by GCBD — Terms and Conditions. https: //www.apple.com/legal/internet-services/icloud/en/gcbd-terms.html

[11]. World Trade Organization. (1995). WTO Analytical Index, GATS — Article XIV (Jurisprudence): General Exceptions. https: //www.wto.org/english/res_e/publications_e/ai17_e/gats_art14_jur.pdf

Cite this article

Wu,Y. (2025). Data Localization and the GATS Public Order Exception: A Legal Examination of China's Cybersecurity Law and the Apple iCloud Guizhou Case. Lecture Notes in Education Psychology and Public Media,128,48-54.

Data availability

The datasets used and/or analyzed during the current study will be available from the authors upon reasonable request.

About volume

Volume title: Proceedings of ICILLP 2025 Symposium: Property Law and Blockchain Applications in International Law and Legal Policy

ISBN: 978-1-80590-449-6(Print) / 978-1-80590-450-2(Online)

Editor: Renuka Thakore

Conference website: https://2025.icillp.org/London.html

Conference date: 21 November 2025

Series: Lecture Notes in Education Psychology and Public Media

Volume number: Vol.128

ISSN: 2753-7048(Print) / 2753-7056(Online)

© 2024 by the author(s). Licensee EWA Publishing, Oxford, UK. This article is an open access article distributed under the terms and conditions of the Creative Commons Attribution (CC BY) license. Authors who publish this series agree to the following terms:

1. Authors retain copyright and grant the series right of first publication with the work simultaneously licensed under a Creative Commons Attribution License that allows others to share the work with an acknowledgment of the work's authorship and initial publication in this series.

2. Authors are able to enter into separate, additional contractual arrangements for the non-exclusive distribution of the series's published version of the work (e.g., post it to an institutional repository or publish it in a book), with an acknowledgment of its initial publication in this series.

3. Authors are permitted and encouraged to post their work online (e.g., in institutional repositories or on their website) prior to and during the submission process, as it can lead to productive exchanges, as well as earlier and greater citation of published work (See Open access policy for details).