A Permanent Court of Arbitration tribunal has ruled that GDPR doesn’t apply to investor-state arbitrations under the North American Free Trade Agreement – even when one of the arbitrators is based in the UK. Filed under Canada IT & Data Protection Topics Cybersecurity Data privacy Disputes Organisations International Bar Association International Council for Commercial Arbitration International Court of Justice NAFTA UNCITRAL World Bank