Search papers, labs, and topics across Lattice.
This paper develops a decision support system for data-exporting firms navigating complex cross-border data flow regulations, framing compliance as a hard constraint in a finite-horizon Markov decision process. By employing masked deep reinforcement learning, the system generates policies that not only outperform baseline approaches but also provide interpretable insights into compliance costs versus data flow value. The findings reveal that as regulatory regimes tighten, firms adjust their localization strategies and compliance behaviors in ways that may not be immediately observable, highlighting the nuanced challenges of data governance.
Firms face hidden compliance burdens that may skew their decision-making on cross-border data flows, with regulatory strictness impacting behavior before any visible changes occur.
The economic value of data arises from its flow across organizations and national borders. Yet increasingly stringent data governance regimes are turning cross-border transfer into an institutionally constrained sequential decision, in which firms repeatedly weigh compliance costs against the value of data flows. From the perspective of a data-exporting firm, this paper develops an institutionally anchored decision support system. It converts regulatory rules into a computable minimal compliance mapping and models the firm's weekly decisions as a finite-horizon Markov decision process (MDP), with compliance represented as a hard constraint rather than a penalty term. The resulting problem is solved using masked deep reinforcement learning, while counterfactual path advantages provide interpretable signals to support the firm's cross-border data flow decisions. Experiments show that the policies learned within the system outperform the baselines considered and deliver interpretable, auditable decision support. Local processing concentrates in states where the business value of small lawful transfers does not cover their compliance costs, and the localization boundary shifts systematically as the regime tightens. Credential acquisition is front-loaded within the compliance year, and shallow decision trees reproduce the policy's decisions with high fidelity. Treating the persistent-friction weight as a continuous representation of regulatory strictness further reveals an absorb-then-adjust pattern, in which expected rewards decline before observable behavior changes, implying that assessments based only on behavioral indicators may understate the burden already borne by firms. Moreover, the system is not tied to any specific regulation and can be transferred to other jurisdictions and rule-based compliance problems.
