In 2025, cross-border data rules have shifted from privacy to national security. The U.S. DOJ ban on data transfers to six countries clashes with EU GDPR, forcing global companies to rethink data flows, vendor risks, and AI compliance.