Regulatory measures on cross-border data flows are essential to personal data protection laws. The General Data Protection Regulation (“GDPR”) of the European Union (“EU”) is one of such influential personal data protection regimes, which has become…