International firms, particularly those big Tech firms with operations in major markets such as China, EU and the US, are facing an increasingly challenging task in the evolving data security and personal information protection regulatory environment.