<?xml version="1.0" encoding="ISO-8859-1"?><article xmlns:mml="http://www.w3.org/1998/Math/MathML" xmlns:xlink="http://www.w3.org/1999/xlink" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
<front>
<journal-meta>
<journal-id>2594-0082</journal-id>
<journal-title><![CDATA[Estudios en derecho a la información]]></journal-title>
<abbrev-journal-title><![CDATA[Estud. derecho inf.]]></abbrev-journal-title>
<issn>2594-0082</issn>
<publisher>
<publisher-name><![CDATA[Universidad Nacional Autónoma de México, Instituto de Investigaciones Jurídicas]]></publisher-name>
</publisher>
</journal-meta>
<article-meta>
<article-id>S2594-00822025000200039</article-id>
<article-id pub-id-type="doi">10.22201/iij.25940082e.2025.20.19623</article-id>
<title-group>
<article-title xml:lang="en"><![CDATA[Automating data transfer compliance and dispute resolution with smart contracts]]></article-title>
<article-title xml:lang="es"><![CDATA[Automatización del cumplimiento y resolución de disputas en la transferencia de datos mediante contratos inteligentes]]></article-title>
</title-group>
<contrib-group>
<contrib contrib-type="author">
<name>
<surname><![CDATA[Llamas Covarrubias]]></surname>
<given-names><![CDATA[Jersain Zadamig]]></given-names>
</name>
<xref ref-type="aff" rid="Aff"/>
</contrib>
</contrib-group>
<aff id="Af1">
<institution><![CDATA[,Universidad de Guadalajara  ]]></institution>
<addr-line><![CDATA[ ]]></addr-line>
<country>Mexico</country>
</aff>
<pub-date pub-type="pub">
<day>00</day>
<month>12</month>
<year>2025</year>
</pub-date>
<pub-date pub-type="epub">
<day>00</day>
<month>12</month>
<year>2025</year>
</pub-date>
<numero>20</numero>
<fpage>39</fpage>
<lpage>78</lpage>
<copyright-statement/>
<copyright-year/>
<self-uri xlink:href="http://www.scielo.org.mx/scielo.php?script=sci_arttext&amp;pid=S2594-00822025000200039&amp;lng=en&amp;nrm=iso"></self-uri><self-uri xlink:href="http://www.scielo.org.mx/scielo.php?script=sci_abstract&amp;pid=S2594-00822025000200039&amp;lng=en&amp;nrm=iso"></self-uri><self-uri xlink:href="http://www.scielo.org.mx/scielo.php?script=sci_pdf&amp;pid=S2594-00822025000200039&amp;lng=en&amp;nrm=iso"></self-uri><abstract abstract-type="short" xml:lang="en"><p><![CDATA[Abstract This article proposes a hybrid framework that integrates technological and legal solutions to automate compliance and dispute resolution in international personal data transfers. The approach leverages smart contracts built on blockchain technology, incorporating standardized contractual clauses (SCC/MCC) and non-fungible tokens (NFTs) to trigger complaint procedures. By involving supervisory authorities as escrow agents, the system ensures transparency, efficiency, and regulatory compliance, thereby overcoming the limitations of traditional methods. Through comparative analysis and a case study, the article demonstrates the viability of a scalable and interoperable solution that enhances data subjects&#8217; rights while aligning with the GDPR and other international regulatory frameworks.]]></p></abstract>
<abstract abstract-type="short" xml:lang="es"><p><![CDATA[Resumen Este artículo propone un marco híbrido que integra soluciones tecnológicas y jurídicas para automatizar el cumplimiento y la resolución de disputas en la transferencia internacional de datos personales. La propuesta se fundamenta en la implementación de contratos inteligentes basados en blockchain que incorporan cláusulas contractuales estandarizadas (SCC/MCC) y tokens no fungibles (NFTs) para activar procedimientos de reclamación. Al integrar a las autoridades supervisoras como agentes de custodia, el sistema garantiza transparencia, eficiencia y cumplimiento normativo, superando las limitaciones de los métodos tradicionales. A través de un análisis comparativo y un estudio de caso, se demuestra la viabilidad de una solución escalable e interoperable que fortalece los derechos de los titulares de los datos y se alinea con el RGPD y otros marcos regulatorios internacionales.]]></p></abstract>
<kwd-group>
<kwd lng="en"><![CDATA[data transfers mechanisms]]></kwd>
<kwd lng="en"><![CDATA[cross-border transfer]]></kwd>
<kwd lng="en"><![CDATA[adequacy decision]]></kwd>
<kwd lng="en"><![CDATA[appropriate safeguards]]></kwd>
<kwd lng="en"><![CDATA[smart contracts]]></kwd>
<kwd lng="en"><![CDATA[blockchain]]></kwd>
<kwd lng="en"><![CDATA[dispute resolution]]></kwd>
<kwd lng="es"><![CDATA[mecanismos de transferencia de datos]]></kwd>
<kwd lng="es"><![CDATA[transferencia transfronteriza]]></kwd>
<kwd lng="es"><![CDATA[decisión de adecuación]]></kwd>
<kwd lng="es"><![CDATA[garantías apropiadas]]></kwd>
<kwd lng="es"><![CDATA[contratos inteligentes]]></kwd>
<kwd lng="es"><![CDATA[cadena de bloques]]></kwd>
<kwd lng="es"><![CDATA[resolución de disputas]]></kwd>
</kwd-group>
</article-meta>
</front><back>
<ref-list>
<ref id="B1">
<nlm-citation citation-type="book">
<person-group person-group-type="author">
<name>
<surname><![CDATA[Anusha]]></surname>
<given-names><![CDATA[R.]]></given-names>
</name>
<name>
<surname><![CDATA[Jayashree]]></surname>
<given-names><![CDATA[J.]]></given-names>
</name>
<name>
<surname><![CDATA[Vijayashree]]></surname>
<given-names><![CDATA[J.]]></given-names>
</name>
<name>
<surname><![CDATA[Yousuff]]></surname>
<given-names><![CDATA[M.]]></given-names>
</name>
</person-group>
<article-title xml:lang=""><![CDATA[Blockchain for transaction of large-scale clinical information]]></article-title>
<person-group person-group-type="editor">
<name>
<surname><![CDATA[Malviya]]></surname>
<given-names><![CDATA[R.]]></given-names>
</name>
<name>
<surname><![CDATA[Sundram]]></surname>
<given-names><![CDATA[S.]]></given-names>
</name>
</person-group>
<source><![CDATA[Blockchain for Healthcare 4.0: Technology, Challenges, and Applications]]></source>
<year>2024</year>
<page-range>245-61</page-range><publisher-name><![CDATA[CRC Press]]></publisher-name>
</nlm-citation>
</ref>
<ref id="B2">
<nlm-citation citation-type="">
<person-group person-group-type="author">
<name>
<surname><![CDATA[Bacon]]></surname>
<given-names><![CDATA[J.]]></given-names>
</name>
<name>
<surname><![CDATA[Michels]]></surname>
<given-names><![CDATA[J. D.]]></given-names>
</name>
<name>
<surname><![CDATA[Millard]]></surname>
<given-names><![CDATA[C.]]></given-names>
</name>
<name>
<surname><![CDATA[Singh]]></surname>
<given-names><![CDATA[J.]]></given-names>
</name>
</person-group>
<source><![CDATA[Blockchain demystified]]></source>
<year>2017</year>
<page-range>1-53</page-range></nlm-citation>
</ref>
<ref id="B3">
<nlm-citation citation-type="book">
<person-group person-group-type="author">
<name>
<surname><![CDATA[Bashir]]></surname>
<given-names><![CDATA[I.]]></given-names>
</name>
</person-group>
<source><![CDATA[Mastering blockchain; a deep dive into distributed ledgers, consensus protocols, smart contracts, DApps, cryptocurrencies, Ethereum, and more]]></source>
<year>2020</year>
<edition>3</edition>
<publisher-name><![CDATA[Packt Publishing]]></publisher-name>
</nlm-citation>
</ref>
<ref id="B4">
<nlm-citation citation-type="">
<collab>Commission Nationale Informatique et Libertés [CNIL]</collab>
<source><![CDATA[Blockchain solutions for a responsible use of the blockchain in the context of personal data]]></source>
<year>2018</year>
</nlm-citation>
</ref>
<ref id="B5">
<nlm-citation citation-type="journal">
<person-group person-group-type="author">
<name>
<surname><![CDATA[Cubillos Vélez]]></surname>
<given-names><![CDATA[Á.]]></given-names>
</name>
</person-group>
<article-title xml:lang=""><![CDATA[La explotación de los datos personales por los gigantes de Internet]]></article-title>
<source><![CDATA[Estudios en Derecho a la Información]]></source>
<year>2017</year>
<volume>2</volume>
<numero>3</numero>
<issue>3</issue>
<page-range>27-55</page-range></nlm-citation>
</ref>
<ref id="B6">
<nlm-citation citation-type="">
<collab>EU Blockchain Observatory and Forum</collab>
<source><![CDATA[Smart Contracts]]></source>
<year>2022</year>
</nlm-citation>
</ref>
<ref id="B7">
<nlm-citation citation-type="journal">
<person-group person-group-type="author">
<name>
<surname><![CDATA[Hernández González]]></surname>
<given-names><![CDATA[A. B.]]></given-names>
</name>
</person-group>
<article-title xml:lang=""><![CDATA[Protección de datos personales en el sector privado de la salud]]></article-title>
<source><![CDATA[Estudios en Derecho a la Información]]></source>
<year>2018</year>
<volume>3</volume>
<numero>5</numero>
<issue>5</issue>
<page-range>83-100</page-range></nlm-citation>
</ref>
<ref id="B8">
<nlm-citation citation-type="journal">
<person-group person-group-type="author">
<name>
<surname><![CDATA[Llamas Covarrubias]]></surname>
<given-names><![CDATA[J. Z.]]></given-names>
</name>
</person-group>
<article-title xml:lang=""><![CDATA[Transparencia y protección de datos personales en la cadena de bloques (blockchain)]]></article-title>
<source><![CDATA[Estudios en Derecho a la Información]]></source>
<year>2020</year>
<volume>6</volume>
<numero>11</numero>
<issue>11</issue>
<page-range>27-63</page-range></nlm-citation>
</ref>
<ref id="B9">
<nlm-citation citation-type="journal">
<person-group person-group-type="author">
<name>
<surname><![CDATA[Ocampo Muñoa]]></surname>
<given-names><![CDATA[M. G.]]></given-names>
</name>
</person-group>
<article-title xml:lang=""><![CDATA[Nuevos desafíos para la protección de datos personales en México. La regulación de la tecnología blockchain]]></article-title>
<source><![CDATA[Estudios en Derecho a la Información]]></source>
<year>2019</year>
<volume>4</volume>
<numero>8</numero>
<issue>8</issue>
<page-range>3-20</page-range></nlm-citation>
</ref>
<ref id="B10">
<nlm-citation citation-type="book">
<person-group person-group-type="author">
<name>
<surname><![CDATA[Prusty]]></surname>
<given-names><![CDATA[N.]]></given-names>
</name>
</person-group>
<source><![CDATA[Blockchain for enterprise: Build scalable blockchain applications with privacy, interoperability, and permissioned features]]></source>
<year>2018</year>
<publisher-name><![CDATA[Packt Publishing]]></publisher-name>
</nlm-citation>
</ref>
<ref id="B11">
<nlm-citation citation-type="book">
<person-group person-group-type="author">
<name>
<surname><![CDATA[Ramamurthy]]></surname>
<given-names><![CDATA[B.]]></given-names>
</name>
</person-group>
<source><![CDATA[Blockchain in action]]></source>
<year>2020</year>
<publisher-name><![CDATA[Manning Publications]]></publisher-name>
</nlm-citation>
</ref>
<ref id="B12">
<nlm-citation citation-type="">
<collab>Red Iberoamericana de Protección de Datos [REDIPD]</collab>
<source><![CDATA[Implementation guide on model contract clauses for international personal data transfers (IPDT)]]></source>
<year>2022</year>
</nlm-citation>
</ref>
<ref id="B13">
<nlm-citation citation-type="book">
<person-group person-group-type="author">
<name>
<surname><![CDATA[Tang]]></surname>
<given-names><![CDATA[A.]]></given-names>
</name>
</person-group>
<source><![CDATA[Privacy in practice: establish and operationalize a Holistic Data Privacy Program]]></source>
<year>2023</year>
<publisher-name><![CDATA[CRC Press]]></publisher-name>
</nlm-citation>
</ref>
<ref id="B14">
<nlm-citation citation-type="">
<collab>The Law Society</collab>
<source><![CDATA[Blockchain legal and regulatory guidance]]></source>
<year>2022</year>
<edition>2</edition>
</nlm-citation>
</ref>
<ref id="B15">
<nlm-citation citation-type="">
<collab>Tribunal De Justicia De La Unión Europea (CJEU)</collab>
<source><![CDATA[Asunto C-311/18, Data Protection Commissioner v Facebook Ireland Ltd, Maximillian Schrems]]></source>
<year>2018</year>
</nlm-citation>
</ref>
<ref id="B16">
<nlm-citation citation-type="book">
<person-group person-group-type="author">
<name>
<surname><![CDATA[Upadhyay]]></surname>
<given-names><![CDATA[N.]]></given-names>
</name>
</person-group>
<source><![CDATA[UnBlock the Blockchain]]></source>
<year>2019</year>
<publisher-name><![CDATA[Springer]]></publisher-name>
</nlm-citation>
</ref>
<ref id="B17">
<nlm-citation citation-type="book">
<person-group person-group-type="author">
<name>
<surname><![CDATA[Voss]]></surname>
<given-names><![CDATA[J.]]></given-names>
</name>
</person-group>
<article-title xml:lang=""><![CDATA[Data protection issues for smart contracts]]></article-title>
<person-group person-group-type="editor">
<name>
<surname><![CDATA[Corrales Compagnucci]]></surname>
<given-names><![CDATA[M.]]></given-names>
</name>
<name>
<surname><![CDATA[Fenwick]]></surname>
<given-names><![CDATA[M.]]></given-names>
</name>
<name>
<surname><![CDATA[Wrbka]]></surname>
<given-names><![CDATA[S.]]></given-names>
</name>
</person-group>
<source><![CDATA[Smart contracts: technological, business and legal perspectives]]></source>
<year>2021</year>
<page-range>79-100</page-range><publisher-name><![CDATA[Hart Publishing]]></publisher-name>
</nlm-citation>
</ref>
<ref id="B18">
<nlm-citation citation-type="">
<collab>World Economic Forum [WEF]</collab>
<source><![CDATA[Inclusive deployment of blockchain for supply chains: Part 4: Protecting your data]]></source>
<year>2019</year>
</nlm-citation>
</ref>
<ref id="B19">
<nlm-citation citation-type="">
<collab>World Economic Forum [WEF]</collab>
<source><![CDATA[Redesigning trust: Blockchain deployment toolkit]]></source>
<year>2020</year>
</nlm-citation>
</ref>
<ref id="B20">
<nlm-citation citation-type="journal">
<collab>Parlamento Europeo</collab>
<collab>Consejo de la Unión Europea</collab>
<article-title xml:lang=""><![CDATA[Reglamento (UE) 2016/679 del Parlamento Europeo y del Consejo, de 27 de abril de 2016, relativo a la protección de las personas físicas en lo que respecta al tratamiento de datos personales y a la libre circulación de estos datos (Reglamento General de Protección de Datos)]]></article-title>
<source><![CDATA[Diario Oficial de la Unión Europea]]></source>
<year>2016</year>
<numero>L119/1</numero>
<issue>L119/1</issue>
</nlm-citation>
</ref>
<ref id="B21">
<nlm-citation citation-type="journal">
<collab>Parlamento Europeo</collab>
<collab>Consejo de la Unión Europea</collab>
<article-title xml:lang=""><![CDATA[Reglamento (UE) 2023/1232 del Parlamento Europeo y del Consejo de 14 de junio de 2023 sobre normas armonizadas de acceso justo y uso de datos (Ley de Datos)]]></article-title>
<source><![CDATA[Diario Oficial de la Unión Europea]]></source>
<year>2023</year>
<numero>L165/1</numero>
<issue>L165/1</issue>
</nlm-citation>
</ref>
<ref id="B22">
<nlm-citation citation-type="">
<collab>EDPB</collab>
<source><![CDATA[Guidelines 2/2018 on derogations of Article 49 under Regulation 2016/679]]></source>
<year>2018</year>
</nlm-citation>
</ref>
<ref id="B23">
<nlm-citation citation-type="">
<collab>EDPB</collab>
<source><![CDATA[Recommendations 01/2020 on measures that supplement transfer tools to ensure compliance with the EU level of protection of personal data]]></source>
<year>2021</year>
</nlm-citation>
</ref>
<ref id="B24">
<nlm-citation citation-type="">
<collab>EDPB</collab>
<source><![CDATA[Guidelines 2/2020 on articles 46 (2) (a) and 46 (3) (b) of Regulation 2016/679]]></source>
<year>2020</year>
</nlm-citation>
</ref>
<ref id="B25">
<nlm-citation citation-type="journal">
<person-group person-group-type="author">
<name>
<surname><![CDATA[Ast]]></surname>
<given-names><![CDATA[F.]]></given-names>
</name>
</person-group>
<article-title xml:lang=""><![CDATA[Secure your contract with Kleros dispute resolution]]></article-title>
<source><![CDATA[Kleros]]></source>
<year>2020</year>
</nlm-citation>
</ref>
<ref id="B26">
<nlm-citation citation-type="">
<collab>EDPB</collab>
<source><![CDATA[Guidelines 04/2021 on codes of conduct as tools for transfers]]></source>
<year>2021</year>
</nlm-citation>
</ref>
<ref id="B27">
<nlm-citation citation-type="">
<collab>EDPB</collab>
<source><![CDATA[Recommendations 1/2022 on the application for approval and on the elements and principles to be found in controller binding corporate rules (Art. 47 GDPR)]]></source>
<year>2022</year>
</nlm-citation>
</ref>
<ref id="B28">
<nlm-citation citation-type="">
<collab>EDPB</collab>
<source><![CDATA[Guidelines 07/2022 on certification as a tool for transfers]]></source>
<year>2023</year>
</nlm-citation>
</ref>
<ref id="B29">
<nlm-citation citation-type="journal">
<person-group person-group-type="author">
<name>
<surname><![CDATA[Lesaege]]></surname>
<given-names><![CDATA[C.]]></given-names>
</name>
<name>
<surname><![CDATA[George]]></surname>
<given-names><![CDATA[W.]]></given-names>
</name>
<name>
<surname><![CDATA[Ast]]></surname>
<given-names><![CDATA[F.]]></given-names>
</name>
</person-group>
<article-title xml:lang=""><![CDATA[Long paper v2.0.2]]></article-title>
<source><![CDATA[Kleros]]></source>
<year>2021</year>
</nlm-citation>
</ref>
</ref-list>
</back>
</article>
