The Global Cross-Border Privacy Rules (CBPR) Forum has launched its Global CBPR and Global Privacy Recognition for Processors (PRP) certifications, extending the APEC CBPR model to a wider group of countries.
Key points
- Global CBPR certifies controllers; Global PRP certifies processors.
- Certification is assessed by accredited accountability agents against common privacy requirements.
- Requirements include security safeguards and accountability for onward transfers.
- Members include the US, Canada, Japan, Korea, Singapore, Australia, Taiwan, the Philippines and Mexico.
- The UK participates as an Associate.
Some jurisdictions recognise CBPR or PRP certification as a basis for transfers. UK organisations operating in the Asia-Pacific region may find certification a useful way to demonstrate privacy compliance to customers and regulators.
Source: The Global CBPR and Global PRP systems are now live (Global CBPR Forum)
Need help understanding what this change means for your organisation? Get in touch for a pragmatic, no-obligation conversation.
