CEDS Domain 9: Cross-Border Discovery Study Guide 2026

What Domain 9 Actually Tests

Cross-border and international discovery sits at the intersection of law, technology, and geopolitics. For CEDS candidates, Domain 9 is not about memorizing a single statute-it demands that you understand how competing legal systems create friction when a U.S. litigation team needs data that physically exists in Frankfurt, Tokyo, or São Paulo.

The ACEDS exam, governed by BARBRI's Association of Certified E-Discovery Specialists, tests this friction through scenario-based multiple-choice questions. You won't see a question that asks "What does GDPR stand for?" You will see a question describing a U.S. federal court order compelling production of employee emails stored on a German server, and you'll need to identify the correct procedural and legal response. That applied framing is what separates Domain 9 from a general legal knowledge quiz.

Domain 9's content spans three broad categories: the procedural mechanisms for requesting evidence across borders, the substantive foreign and domestic laws that limit what can be transferred, and the practical workflow decisions that e-discovery professionals make when those laws conflict. Each of those categories can appear in exam questions.

Core Legal Frameworks You Must Know

Before diving into individual laws, recognize that international discovery operates under layers of authority: U.S. federal procedural rules, bilateral or multilateral treaties, and the domestic laws of the country where the data resides. A CEDS candidate must hold all three layers in mind simultaneously.

The Federal Rules of Civil Procedure in a Global Context

The Federal Rules of Civil Procedure (FRCP) govern discovery in U.S. federal litigation, but they have no extraterritorial enforcement power on their own. When a U.S. court issues a discovery order touching foreign-held data, the opposing party-or a foreign government-may argue that compliance violates local law. Understanding the limits of FRCP authority is foundational for Domain 9 questions.

The CLOUD Act

The Clarifying Lawful Overseas Use of Data (CLOUD) Act of 2018 directly affects how U.S. law enforcement and, by extension, civil litigants deal with data stored abroad by U.S.-based cloud providers. CEDS candidates should understand how CLOUD Act executive agreements interact with traditional mutual legal assistance treaties (MLATs) and what that means for corporate data custodians.

GDPR and European Data Protection: The Exam's Heaviest Hitter

The EU's General Data Protection Regulation is the most frequently tested cross-border discovery topic, and for good reason-it is the most operationally consequential privacy law that U.S. e-discovery practitioners encounter. Candidates who treat GDPR as simply "a European privacy law" will struggle. The CEDS exam tests the specific mechanisms GDPR provides and prohibits.

Lawful Bases for Transfer Under GDPR Chapter V

When a U.S. litigation team wants EU personal data, GDPR Chapter V controls whether that transfer is lawful. Know the difference between an adequacy decision, standard contractual clauses (SCCs), and binding corporate rules (BCRs). The invalidation of Privacy Shield by the Schrems II decision-and its replacement by the EU-U.S. Data Privacy Framework-is exam-relevant content because it illustrates how transfer mechanisms can disappear overnight, forcing practitioners to pivot.

Data Subject Rights as a Discovery Complication

GDPR grants data subjects rights to access, erasure, and portability. In an e-discovery context, a data subject's erasure request can create a direct conflict with a litigation hold obligation. Domain 9 questions may ask you to identify which obligation takes precedence and what documentation a practitioner should maintain. This intersects directly with the cross-border discovery frameworks you are mastering and with Domain 8 (Legal Hold and Litigation Readiness).

EU Member State Variations

GDPR is a regulation, meaning it applies uniformly across the EU-but member states have discretion in certain areas, including employment data and data protection authority enforcement priorities. Germany's particularly strong labor data protections and France's blocking statute work alongside GDPR to create a layered compliance challenge that the CEDS exam reflects.

The Hague Evidence Convention and Letters Rogatory

The 1970 Hague Convention on the Taking of Evidence Abroad in Civil or Commercial Matters is the primary multilateral treaty mechanism for cross-border civil discovery. Its central instrument is the Letter of Request-a formal judicial document sent from the requesting state's court to a central authority in the requested state.

For the CEDS exam, the critical issue is the tension between using Hague Convention procedures and seeking direct discovery under U.S. rules. U.S. courts have held that the Hague Convention is permissive, not mandatory, for U.S. litigants-meaning domestic courts can order discovery directly even when a Hague process exists. However, foreign courts and governments do not always agree with that interpretation, and many jurisdictions treat the Convention as the exclusive mechanism. That disagreement is precisely what produces the conflict scenarios you'll see in exam questions.

Blocking Statutes and Foreign Data Sovereignty

Blocking statutes are domestic laws specifically designed to prevent compliance with foreign discovery orders. France's "French Blocking Statute" (Law No. 68-678) is the most frequently cited example in e-discovery literature and on the CEDS exam. China's Data Security Law and Cybersecurity Law create similar barriers for data held within China's borders.

The Balancing Test for Competing Obligations

When a U.S. discovery order conflicts with a foreign blocking statute, U.S. courts apply a comity-based balancing test to determine whether to compel production anyway. The Restatement (Third) of Foreign Relations Law factors are the standard framework: importance of the information, hardship to the party, nationality of the party, location of the information, and the extent to which foreign law actually prohibits compliance.

CEDS candidates must know these factors exist, understand how courts weigh them, and-critically-recognize the e-discovery practitioner's role when a court orders production despite a blocking statute. That practitioner-level perspective is what distinguishes CEDS scenario questions from pure bar exam questions.

China's Data Localization Requirements

China's Cybersecurity Law and Data Security Law impose strict localization requirements on "important data" and "critical information infrastructure." Cross-border transfer of data from China requires security assessments from Chinese authorities in many circumstances. This is an increasingly tested area as global commercial disputes involving Chinese operations multiply.

How CEDS Scenario Questions Test Domain 9

The CEDS exam's 100 multiple-choice questions are scenario-based-each one presents a realistic professional situation and asks what the correct course of action is, what a document means, or what risk is present. Domain 9 scenarios tend to follow recognizable patterns that candidates can train themselves to recognize.

Pattern 1: Jurisdiction Identification

A scenario describes data located in a specific country and asks what legal framework governs its collection or transfer. The correct answer requires you to match the jurisdiction to the right treaty, regulation, or domestic law-not just name the law in the abstract.

Pattern 2: Conflict Resolution

A scenario presents a direct conflict between a U.S. court order and a foreign law prohibition. The question asks what the e-discovery professional should do. Correct answers almost always involve engaging local counsel, notifying the court of the conflict, and following comity principles-not simply complying with the U.S. order without disclosure.

Pattern 3: Transfer Mechanism Selection

A scenario identifies a data transfer situation and lists four possible legal bases or mechanisms. The correct answer requires knowing which mechanism applies and, importantly, which mechanisms have been invalidated or are unavailable in the described circumstances. This is where knowledge of Schrems II and the EU-U.S. Data Privacy Framework pays off. Supplementing your study with full-length CEDS practice exams is the best way to internalize these patterns before exam day.

Where Domain 9 Collides with Other CEDS Domains

Cross-border discovery does not exist in isolation within the CEDS curriculum. Understanding where Domain 9 overlaps with other domains helps you study more efficiently and answer questions that blend multiple subject areas-which the CEDS exam regularly does.

Candidates preparing for Domain 9 should also review CEDS Domain 10: Technology-Assisted Review, because TAR and predictive coding decisions are increasingly made in the context of cross-border review populations where language, data residency, and privacy law all interact.

A Domain-Aligned Study Schedule for Cross-Border Mastery

Because ACEDS does not publish official domain percentage weightings, candidates cannot rely on a mathematically derived study allocation. What we do know is that the CEDS study guide covers approximately 250 pages across 11 domains, and that cross-border discovery is complex enough to warrant dedicated, structured preparation rather than a single cram session.

Registration, Format, and Exam-Day Mechanics

Understanding the CEDS exam's administrative structure is part of exam readiness. The standard certification package costs approximately $1,695 and includes the study guide, one practice exam, and a single exam attempt. The Virtual Classroom bundle is approximately $2,180 and adds instructor-led instruction. Both packages require candidates to sit the exam within one year of purchase.

Before you can register for the exam, you must demonstrate 40 qualifying credits drawn from professional experience (maximum 20 credits), training (maximum 25 credits), and education (maximum 15 credits). Two professional references are also required. This prerequisite structure means the typical CEDS candidate already has meaningful e-discovery experience-which shapes how Domain 9 questions are framed. They assume you understand what a document review workflow looks like; they test whether you know what changes when that workflow crosses a border.

After passing, you have up to 90 days to submit your application for certification. The CEDS credential requires annual renewal through continuing education, keeping certified practitioners current on evolving cross-border frameworks-a meaningful benefit given how quickly international data protection law changes.

The exam is vendor-neutral and follows ICE (Institute for Credentialing Excellence) standards. It is not tied to any specific software platform or law firm's methodology, which reinforces why scenario-based question practice-rather than product-specific training-is the right preparation approach.

Frequently Asked Questions