We analyze an international treaty that proposes a structural response to the challenges of the digital age, establishing common principles that seek to protect people without hindering technological innovation. Understanding its scope is key to anticipating the direction data regulation will take in the coming years.