Data on the Move: A Multilateral Approach Through Cross-Border Privacy Rules