The legislation could inspire similar data protection laws worldwide and impact international data flows and cross-border business operations.