Various data protection dilemmas manifest in the context of cloud computing, which includes the uncertainty in ascertaining the role of cloud computing service providers and customers as data controllers or data processors, the scope of contractual delineation of data protection/privacy rights and obligations, and contractual exclusion or limitation of liability. Such predicaments are further exacerbated in a cross-border context due to the diversity in domestic laws governing contracts and data protection/privacy regulations. While UNCITRAL has taken cognizance of some key data protection dilemmas through its 2019 Notes on Cloud Computing Contracts, this presentation articulated the need for UNCITRAL to enhance its role in harmonization of law governing contractual provisions on data protection in its future works on data transactions to not only facilitate trade but also attain specific SDGs promoting data justice.