Investigating the Legal Complexities of Cloud Forensic Investigations in Cross-Border Scenarios and Developing Strategies for International Cooperation

Introduction: The rapid rise of cloud computing has reshaped data storage and crime, shifting investigations to digital forensics. Jurisdictional complexities, dispersed data, and lack of server access hinder cross border cloud forensics, while no unified international legal framework allows cybercriminals to find safe havens and blocks admissible evidence preservation.
Objectives: This study aims to analyse the legal challenges hindering effective cross-border cloud forensic investigations and propose strategies for international cooperation. The key objectives of this study include identifying issues related to data sovereignty, jurisdiction, and evidence admissibility and establishing best practices to streamline multinational collaboration.

Cloud Forensics, Cross-Border Jurisdiction, Digital Evidence, International Cooperation

1. Abraha, H. H. (2019). How compatible is the US ‘CLOUD Act’ with cloud computing? A brief analysis. International Data Privacy Law, 9(3), 207–215. https://doi.org/10.1093/idpl/ipz009 [Google Scholar] [Crossref]

2. AllahRakha, N. (2024). Demystifying the Network and Cloud Forensics’ Legal, Ethical, and Practical Considerations. Pakistan Journal of Criminology, 16.2, 119–132. https://doi.org/10.62271/pjc.16.2.119.132 [Google Scholar] [Crossref]

3. Alshabibi, M. M., Bu dookhi, A. K., & Hafizur Rahman, M. M. (2024). Forensic Investigation, Challenges, and Issues of Cloud Data: A Systematic Literature Review. Computers, 13(8), Article 8. https://doi.org/10.3390/computers13080213 [Google Scholar] [Crossref]

4. Annas, W., Malik, David, S., Bhatti, Tae-Jin, P., Hafiz, U., Ishtiaq, Jae-Cheol, R., & Ki-Il, K. (2024). Cloud Digital Forensics: Beyond Tools, Techniques, and Challenges. Https://Doi.Org/10.3390/S24020433. https://www.mdpi.com/1424-8220/24/2/433 [Google Scholar] [Crossref]

5. Ashurov, A. (2024). Jurisdictional Challenges in Cross-Border Cybercrime Investigations. Центральноазиатский журнал междисциплинарных исследований и исследований в области управления, 1(8), Article 8. https://www.in-academy.uz/index.php/cajmrms/article/view/31783 [Google Scholar] [Crossref]

6. Böhm, H. (2021). Five Roles of Cross-border Cooperation Against Re-bordering: Journal of Borderlands Studies: Vol 38, No 3. https://www.tandfonline.com/doi/abs/10.1080/08865655.2021.1948900 [Google Scholar] [Crossref]

7. Brown, G., & Peterson, R. S. (2022). The Distended Board: Uber. In G. Brown & R. S. Peterson (Eds.), Disaster in the Boardroom: Six Dysfunctions Everyone Should Understand (pp. 113–124). Springer International Publishing. https://doi.org/10.1007/978-3-030-91658-9_7 [Google Scholar] [Crossref]

8. Buçaj, E., & Idrizaj, K. (2025). The need for cybercrime regulation on a global scale by the international law and cyber convention. Multidisciplinary Reviews, 8(1), 2025024–2025024. https://doi.org/10.31893/multirev.2025024 [Google Scholar] [Crossref]

9. Casino, F., Pina, C., López-Aguilar, P., Batista, E., Solanas, A., & Patsakis, C. (2022). SoK: Cross-border criminal investigations and digital evidence. Journal of Cybersecurity, 8(1), tyac014. https://doi.org/10.1093/cybsec/tyac014 [Google Scholar] [Crossref]

10. Christakis, T. (2017). Data, Extraterritoriality and International Solutions to Transatlantic Problems of Access to Digital Evidence. Legal Opinion on the Microsoft Ireland Case (Supreme Court of the United States) (SSRN Scholarly Paper No. 3086820). Social Science Research Network. https://papers.ssrn.com/abstract=3086820 [Google Scholar] [Crossref]

11. Crowe, S., Cresswell, K., Robertson, A., Huby, G., Avery, A., & Sheikh, A. (2011). The case study approach. BMC Medical Research Methodology, 11, 100. https://doi.org/10.1186/1471-2288-11-100 [Google Scholar] [Crossref]

12. Currie, R. J. (2017). Cross-Border Evidence Gathering in Transnational Criminal Investigation: Is the Microsoft Ireland Case the “Next Frontier”? Canadian Yearbook of International Law/Annuaire Canadien de Droit International, 54, 63–97. https://doi.org/10.1017/cyl.2017.7 [Google Scholar] [Crossref]

13. Deandra, F., Hafiz, & Sherly, I., Muda. (2025). ADVANCING DIGITAL FORENSIC INVESTIGATIONS: ADDRESSING CHALLENGES AND ENHANCING CYBERCRIME SOLUTIONS. World Journal of Information Technology, 3(1). https://doi.org/10.61784/wjit3018 [Google Scholar] [Crossref]

14. Dickson, D. J. (2024). The European Arrest Warrant in Scots Law. Transnational Criminal Law Review, 3(1), Article 1. https://doi.org/10.22329/tclr.v3i1.8495 [Google Scholar] [Crossref]

15. Egho-Promise, E., Idahosa, S., Asante, G., & Okungbowa, A. (2024). Digital Forensic Investigation Standards in Cloud Computing. Universal Journal of Computer Sciences and Communications, 23–45. https://www.scipublications.com/journal/index.php/ujcsc/article/view/923 [Google Scholar] [Crossref]

16. Enhancing Trust and Immutability in Cloud Forensics | SpringerLink. (n.d.). Retrieved October 7, 2024, from https://link.springer.com/chapter/10.1007/978-981-15-8289-9_74 [Google Scholar] [Crossref]

17. Forensics framework for cloud computing—ScienceDirect. (n.d.). Retrieved October 11, 2024, from https://www.sciencedirect.com/science/article/abs/pii/S0045790617302689?via%3Dihub [Google Scholar] [Crossref]

18. Gruber, A., & Robin Pierce, J. D. (2019). Transatlantic challenges in access to electronic evidence: Conflicting obligations under the Stored Communications Act and the General Data Protection Regulation. https://arno.uvt.nl/show.cgi?fid=148179 [Google Scholar] [Crossref]

19. Hazlett, T. W. (2023). Populist Antitrust: The Case of FTC v. Facebook. The Antitrust Bulletin, 68(2), 250–262. https://doi.org/10.1177/0003603X231163218 [Google Scholar] [Crossref]

20. Islam, Md. T., & Karim, R. (2022). Cybersecurity and Integrated Business Models. In S. Singh Dadwal, H. Jahankhani, & A. Hassan (Eds.), Integrated Business Models in the Digital Age: Principles and Practices of Technology Empowered Strategies (pp. 3–46). Springer International Publishing. https://doi.org/10.1007/978-3-030-97877-8_1 [Google Scholar] [Crossref]

21. Jerman-Blažič, B. & Tomaž Klobučar. (2020). A New Legal Framework for Cross-Border Data Collection in Crime Investigation amongst Selected European Countries. https://doi.org/10.5281/ZENODO.3698359 [Google Scholar] [Crossref]

22. Jougleux, P. (2022). Personal Data and Privacy Protection: Facebook and the Big Data Mountain. In P. Jougleux (Ed.), Facebook and the (EU) Law: How the Social Network Reshaped the Legal Framework (pp. 13–92). Springer International Publishing. https://doi.org/10.1007/978-3-031-06596-5_2 [Google Scholar] [Crossref]

23. Kiesow, C., Elif. (2020). Data Breaches and GDPR | SpringerLink. https://link.springer.com/referenceworkentry/10.1007/978-3-319-78440-3_39 [Google Scholar] [Crossref]

24. Lemieux, F. (2024). National and Transnational Police Cooperation. In Intelligence and State Surveillance in Modern Societies (pp. 105–114). Emerald Publishing Limited. https://doi.org/10.1108/978-1-83549-097-620242006 [Google Scholar] [Crossref]

25. Machova, T. (2021). The discourse of surveillance and privacy: Biopower and panopticon in the Facebook-Cambridge Analytica scandal. https://urn.kb.se/resolve?urn=urn:nbn:se:mau:diva-44664 [Google Scholar] [Crossref]

26. Malik, A. W., Bhatti, D. S., Park, T.-J., Ishtiaq, H. U., Ryou, J.-C., & Kim, K.-I. (2024). Cloud Digital Forensics: Beyond Tools, Techniques, and Challenges. Sensors, 24(2), Article 2. https://doi.org/10.3390/s24020433 [Google Scholar] [Crossref]

27. McGovern, V. (2024). Uber: Cyber Breaches. SAGE Publications: SAGE Business Cases Originals. https://doi.org/10.4135/9781071939994 [Google Scholar] [Crossref]

28. Mei, M. D. M. (2024). KIGALI INDEPENDENT UNIVERSITY ULK SCHOOL OF LAW DEPARTMENT OF LAW P.O BOX 2289 KIGALI. [Google Scholar] [Crossref]

29. Michels, J. D., Millard, C., & Walden, I. (2023). On Cloud Sovereignty: Should European Policy Favour European Clouds? (SSRN Scholarly Paper No. 4619918). Social Science Research Network. https://doi.org/10.2139/ssrn.4619918 [Google Scholar] [Crossref]

30. Moyo, I. (2024). Cross Border Security in the Southern African Region: Transcending Statolatry. Taylor & Francis. [Google Scholar] [Crossref]

31. Murugan, T., & Singh, W. J. (2025). Cybersecurity and Data Science Innovations for Sustainable Development of HEICC: Healthcare, Education, Industry, Cities, and Communities. CRC Press. [Google Scholar] [Crossref]

32. Nelufule, N., Masango, M., & Singano, T. (2024). The Future of Digital Forensic Investigations: Keeping the Pace with Technological Advancements. 2024 47th MIPRO ICT and Electronics Convention (MIPRO), 1843–1848. https://doi.org/10.1109/MIPRO60963.2024.10569461 [Google Scholar] [Crossref]

33. Ok, E., Aria, J., Jose, D., & Diego, C. (2025). The Impact of Cybersecurity Laws on Legal Procedures and Case Law. [Google Scholar] [Crossref]

34. Olber, P. (2021). The survey on cross-border collection of digital evidence by representatives from Polish prosecutors’ offices and judicial authorities. Journal of Digital Forensics, Security and Law, 16(2). https://doi.org/10.58940/1558-7223.1700 [Google Scholar] [Crossref]

35. Ozioko, A. C. (2024). Legal Challenges in Digital Forensics for Financial Crime Investigations. Global Research for New World Order, 5(1), Article 1. http://journals.frankridgeconsortium.com/index.php/GRNWO/article/view/49 [Google Scholar] [Crossref]

36. Patterson, A. (2020). The Ongoing Issue of Cyber Insecurity: Why Cyber Insurance Should Be Mandatory for Consumer Companies. Florida State University Law Review, 48, 841. https://heinonline.org/HOL/Page?handle=hein.journals/flsulr48&id=889&div=&collection= [Google Scholar] [Crossref]

37. Qian, X. (2024). Redefining International Law Paradigms: Charting Cybersecurity, Trade, and Investment Trajectories within Global Legal Boundaries in: The Journal of World Investment & Trade Volume 25 Issue 3 (2024). https://brill.com/view/journals/jwit/25/3/article-p295_1.xml [Google Scholar] [Crossref]

38. Robbins, J. M., & Sechooler, A. M. (2018). Once More unto the Breach: What the Equifax and Uber Data Breaches Reveal about the Intersection of Information Security and the Enforcement of Securities Laws. Criminal Justice, 33, 4. https://heinonline.org/HOL/Page?handle=hein.journals/cjust33&id=6&div=&collection= [Google Scholar] [Crossref]

39. Ruohonen, J. (2023). Recent Trends in Cross-Border Data Access by Law Enforcement Agencies (No. arXiv:2302.09942). arXiv. https://doi.org/10.48550/arXiv.2302.09942 [Google Scholar] [Crossref]

40. Saadallah, M., Shahim, A., & Khapova, S. (2025). Harmonizing Paradoxical Tensions in SOCs: A Strategic Model for Integrating AI, Automation, and Human Expertise in Cyber Defense and Incident Response. https://hdl.handle.net/10125/109586 [Google Scholar] [Crossref]

41. Safie, S. I., & Bin Md Bashah, S. R. (2024). Implementing ISO 27037 for Digital Forensics in the Malaysian Anti-Corruption Commission: Challenges and Solutions. 2024 IEEE 10th International Conference on Smart Instrumentation, Measurement and Applications (ICSIMA), 81–85. https://doi.org/10.1109/ICSIMA62563.2024.10675543 [Google Scholar] [Crossref]

42. Sargiotis, D. (2024). Data Governance Frameworks: Models and Best Practices. In D. Sargiotis (Ed.), Data Governance: A Guide (pp. 165–195). Springer Nature Switzerland. https://doi.org/10.1007/978-3-031-67268-2_4 [Google Scholar] [Crossref]

43. Sharma, S. (2020). Issues with enforcing Mutual Legal Assistance Treaties (MLATs): Access to cross-border data in criminal investigation (SSRN Scholarly Paper No. 3815270). Social Science Research Network. https://doi.org/10.2139/ssrn.3815270 [Google Scholar] [Crossref]

44. Sibe, R. T., & Kaunert, C. (2024). Digital Evidence, Digital Forensics, and Digital Forensic Readiness. In R. T. Sibe & C. Kaunert (Eds.), Cybercrime, Digital Forensic Readiness, and Financial Crime Investigation in Nigeria (pp. 57–83). Springer Nature Switzerland. https://doi.org/10.1007/978-3-031-54089-9_3 [Google Scholar] [Crossref]

45. Syaakirah, C., Rafifah, Syifa, L., & Muda, I. (2025). DIGITAL FORENSIC INVESTIGATION IN CYBERCRIME CASES: CASE STUDIES AND RECOMMENDATIONS. Multidisciplinary Journal of Engineering and Technology, 2(1). https://doi.org/10.61784/mjet3018 [Google Scholar] [Crossref]

46. Symeonidis, I., Biczók, G., Shirazi, F., Pérez-Solà, C., Schroers, J., & Preneel, B. (2018). Collateral damage of Facebook third-party applications: A comprehensive study. Computers & Security, 77, 179–208. https://doi.org/10.1016/j.cose.2018.03.015 [Google Scholar] [Crossref]

47. Toussaint, M., Krima, S., & Panetto, H. (2024). Industry 4.0 data security: A cybersecurity frameworks review. Journal of Industrial Information Integration, 39, 100604. https://doi.org/10.1016/j.jii.2024.100604 [Google Scholar] [Crossref]

48. Trautman, L. J., & Ormerod, P. C. (2016). Corporate Directors’ and Officers’ Cybersecurity Standard of Care: The Yahoo Data Breach. American University Law Review, 66, 1231. https://heinonline.org/HOL/Page?handle=hein.journals/aulr66&id=1275&div=&collection= [Google Scholar] [Crossref]

49. Tréguer, F. (2018). US Technology Companies and State Surveillance in the Post-Snowden Context: Between Cooperation and Resistance. [Google Scholar] [Crossref]

50. Tripathi, M., & Mukhopadhyay, A. (2022). Does privacy breach affect firm performance? An analysis incorporating event-induced changes and event clustering. Information & Management, 59(8), 103707. https://doi.org/10.1016/j.im.2022.103707 [Google Scholar] [Crossref]

51. Tyagi, A. K., Dananjayan, S., Agarwal, D., & Thariq Ahmed, H. F. (2023). Blockchain—Internet of Things Applications: Opportunities and Challenges for Industry 4.0 and Society 5.0. https://www.mdpi.com/1424-8220/23/2/947 [Google Scholar] [Crossref]

52. Verma, A., Jawanda, K., & Kaur, A. (2021). Data Privacy and Cambridge Analytica: A Case Study. Supremo Amicus, 24, [368]. https://heinonline.org/HOL/Page?handle=hein.journals/supami24&id=368&div=&collection= [Google Scholar] [Crossref]

53. Vogt, S. D. (2017). The Digital Underworld: Combating Crime on the Dark Web in the Modern Era. Santa Clara Journal of International Law, 15, 104. https://heinonline.org/HOL/Page?handle=hein.journals/scjil15&id=104&div=&collection= [Google Scholar] [Crossref]

54. Ward, A. (2022). The Oldest Trick in the Facebook: Would the General Data Protection Regulation Have Stopped the Cambridge Analytica Scandal? Trinity College Law Review, 25, 221. https://heinonline.org/HOL/Page?handle=hein.journals/trinclr25&id=229&div=&collection= [Google Scholar] [Crossref]

55. Zhang, H., & Gong, X. (2024). The research on an electronic evidence forensic system for cross-border cybercrime. The International Journal of Evidence & Proof, 28(1), 21–44. https://doi.org/10.1177/13657127231187059 [Google Scholar] [Crossref]

56. Zuo, Z. (2024). Cross-Border Data Forensics: Challenges and Strategies in the Belt and Road Initiative Digital Era. Asian Social Science, 20(2), Article 2. https://doi.org/10.5539/ass.v20n2p49 [Google Scholar] [Crossref]

• The Impact of Ownership Structure on Dividend Payout Policy of Listed Plantation Companies in Sri Lanka
• Urban Sustainability in North-East India: A Study through the lens of NER-SDG index
• Performance Assessment of Predictive Forecasting Techniques for Enhancing Hospital Supply Chain Efficiency in Healthcare Logistics
• The Fractured Self in Julian Barnes' Postmodern Fiction: Identity Crisis and Deflation in Metroland and the Sense of an Ending
• Impact of Flood on the Employment, Labour Productivity and Migration of Agricultural Labour in North Bihar