In the absence of shared global norms on how data flows should be governed, domestic policymakers everywhere are developing their own 'patches” to regulate data and protect national security and their citizens' privacy.