International Data Flows – Cross Border Privacy Rules, Privacy Recognition for Processors, and Global CBPR and PRP

This document addresses commonly asked questions about the Cross-Border Privacy Rules (CBPR) and Privacy Recognition for Processors (PRP) systems, which are data transfer mechanisms developed by the Asia-Pacific Economic Cooperation (APEC) member economies. CBPR and PRP operationalize the nine Privacy Principles set forth in the 2005 APEC Privacy Framework.

In 2022, several APEC economies established the Global CBPR Forum to transition the APEC CBPR and PRP systems into a global transfer framework, known as Global CBPR and Global PRP. While the Global CBPR and PRP systems have yet to be formally launched, the Forum is actively working to operationalize these new systems, inviting jurisdictions outside APEC to participate in the process.

The CIPL anticipates that the elements of the current CBPR and PRP systems will transition seamlessly to the global framework. Accordingly, our responses to Questions 9-22 (which pertain to the current systems) will likely apply to the Global CBPR. We will update these FAQs as developments warrant.

This document is not designed to be and should not be taken as legal advice.

Download the Paper

Download Now