Traditionally, the world map and territorially bounded spaces have dominated ways in which we imagine how states govern, make laws, and exercise their authority. Under this conception, underlined by traditional international law principles of territorial sovereignty, each state would have exclusive authority to govern and make laws over everything concerning the land within its borders. Yet developments like the proliferation of data flows, which are based on divisible, mobile, and interconnected components of data, are not territorially bounded. This presents a challenge to traditional bases for territorial sovereignty and jurisdiction under international law, which some scholars claim is exceptional due to certain characteristics of data. The question as to how states exercise jurisdiction over, or spatially locate, a protean thing such as data, is one which deserves further exploration. By comparing the approaches of China, EU, and the US, this paper explores how laws and regulations in this area are having extraterritorial effects, thus moving away from a strict territorial approach, yet at the same time, are “reterritorializing” by linking their laws on data privacy and data transfers to data infrastructure, data subjects, or data controllers. This shows that states tend to repurpose their territorial sovereignty as they see fit, but this repurposing is not something which is unique to the data governance context. States have used a variety of justifications historically for the extraterritorial exercise of jurisdiction, as well as found creative ways to reterritorialize things, people, events, and processes that were not strictly territorially bounded within their borders. Thus, rather than treat regulations on data privacy and data transfers as an exceptional exercise of territorial sovereignty beyond borders, we might consider this an exemplification of yet another creative reimagining of the elasticity of sovereignty. These exercises in reimagining are significant when we consider their distributional effects and how they allocate decision-making power over governance of data. The elasticity of sovereignty means that authority, governance, and decision-making are ultimately functions of power.