The focus here is on extended rules and regulations such as Trusted Information Security Assessment Exchange (TISAX) and the NIST Privacy Framework, national laws such as those in Australia and Taiwan, and court decisions – in the context of the validity of the EU-US Privacy Shield, for example.