International Data Flows
topics: International Data Flows
DRAFT – Mapping Global CBPR (as Updated) and Global PRP Systems’ Program Requirements to the EU GDPR
data sharing gdpr cross-border data transfers cbpr
In this Draft Mapping Report, CIPL examines the European Union’s General Data Protection Regulation (GDPR) to assess whether—and to what extent—the GDPR aligns with the Global CBPR Program Requirements (as updated in 2026) and the existing Global PRP Program Requirements. The analysis shows that more than 70% of Global CBPR Program Requirements, as revised, align […]
Global CBPR & Global PRP Systems Playbook: An Actionable Guide for Participation in the Global Cross-Border Privacy Rules and the Global Privacy Recognition for Processors
data sharing cross-border data transfers cbpr
What are the Global Cross-Border Privacy Rules (Global CBPR)? What is the Global Privacy Recognition for Processors (Global PRP)? How do these systems work? What benefits do they provide to businesses and individuals alike? These questions and more are addressed in CIPL’s Global CBPR & Global PRP Systems Playbook, which explains how these programs provide […]
CIPL Response to the Consultation on the Implementation of the Global Cross-Border Privacy Rules Forum Certifications in Canada
regulatory engagement canada
The “Zero Risk” Fallacy: International Data Transfers, Foreign Governments’ Access to Data and the Need for a Risk-Based Approach
cross-border data transfers data sharing
Since the CJEU Schrems II Judgment in July 2020, European data protection authorities (DPAs) in the EU have developed a “zero risk” theory in relation to Chapter V of the General Data Protection Regulation (GDPR). They have been asking data controllers and processors that transfer personal data outside the EU to “eliminate” all risks of […]
CIPL Comments to ANPD Draft Regulations for International Data Transfers
regulatory engagement brazil
International Data Flows – Cross Border Privacy Rules, Privacy Recognition for Processors, and Global CBPR and PRP
prp cbpr cross-border data transfers
This document addresses commonly asked questions about the Cross-Border Privacy Rules (CBPR) and Privacy Recognition for Processors (PRP) systems, which are data transfer mechanisms developed by the Asia-Pacific Economic Cooperation (APEC) member economies. CBPR and PRP operationalize the nine Privacy Principles set forth in the 2005 APEC Privacy Framework. In 2022, several APEC economies established […]
CIPL-TLS Discussion Paper I: The Real Life Harms of Data Localization Policies
cross-border data transfers data sharing
Data underpins the digital transformation of our economies and society. It can be considered one of the most valuable economic assets – responsible use of data enables economic growth and brings benefits and progress to people, governments, and societies at large. Data is also central to governmental and societal interests, such as national security, cyber […]
CIPL-TLS Discussion Paper II: Data Localization and Government Access to Data Stored Abroad
cross-border data transfers data sharing
In this paper, TLS explores one rationale that some proponents of localization have advanced: that localization will insulate companies from foreign governments’ ability to legally compel access to their data. We examine not only the legal framework in the United States (U.S.), but also those of other countries, and conclude that legal systems, in general, […]
CIPL Study Mapping the APEC CBPR System and EU-US Privacy Shield Requirements to the Provisions of the UK GDPR
data sharing cross-border data transfers cbpr
This document presents a comparison of the APEC Cross-Border Privacy Rules (CBPR) Requirements and the EU-U.S. Privacy Shield Requirements to the requirements of the UK General Data Protection Regulation (GDPR). For purposes of this analysis, we analyzed relevant documents pertaining to participation in both the CBPR and Privacy Shield certification system. We present recommendations, as […]
Local Law Assessments and Online Services – Refining the Approach to Beneficial and Protective Cross-Border Data Flows: A Case Study from British Columbia
data sharing cross-border data transfers
Cross-border data flows foster innovation and growth, support cybersecurity, and enable access to essential services. They are important for delivering public services and empowering individuals to access them, including healthcare and education. Cross-border data flows make access to transformational technologies like AI equally available to individuals and public and private sector organizations who might otherwise […]
CIPL Q&A on Cross-Border Privacy Rules (CBPR) and Privacy Recognition for Processors (PRP) 2nd Edition
data sharing cross-border data transfers cbpr prp
This document addresses some commonly asked questions about the APEC Cross-Border Privacy Rules (CBPR) and Privacy Recognition for Processors (PRP) systems. The following questions are addressed in these FAQs: What is APEC? What are the APEC Cross-Border Privacy Rules (CBPR)? Which APEC economies participate in the CBPR? What is the APEC Privacy Recognition for Processors […]
A Path Forward for International Data Transfers under the GDPR after the CJEU Schrems II Decision
cross-border data transfers data sharing
On July 16th 2020, the Court of Justice of the European Union (CJEU) confirmed, in the case known as “Schrems II”, that Standard Contractual Clauses (SCCs) are a valid mechanism for the transfer of personal data outside of the EU, while invalidating the EU Commission’s adequacy decision on the EU-US Privacy Shield. The Judgment substantially impacts […]
CIPL-DSCI Report on Enabling Accountable Data Transfers from India to the United States under India’s Proposed Personal Data Protection Bill
data sharing cross-border data transfers india
Data flows between India and the United States are of unquestionable value to India’s modern digital economy and society. According to a 2019 digital trade report1 from the Hinrich Foundation, digital trade contributed $32.5 billion to India’s domestic economy in 2017. The report further notes that this has the potential to grow to $480 billion […]
CIPL Q&A on Cross-Border Privacy Rules (CBPR) and Privacy Recognition for Processors (PRP)
cbpr data sharing cross-border data transfers prp
This document addresses some commonly asked questions about the APEC Cross-Border Privacy Rules (CBPR) and Privacy Recognition for Processors (PRP) systems. The following questions are addressed in these FAQs: What is APEC? What are the APEC Cross-Border Privacy Rules (CBPR)? Which APEC economies participate in the CBPR? What is the APEC Privacy Recognition for Processors […]
Essential Legislative Approaches for Enabling Cross-Border Data Transfers in a Global Economy
data sharing cross-border data transfers cbpr
Global data flows are the product of the increasing globalization and digitalization of business processes and society. They are foundational to the modern digital economy. The ability to use, share and access information across borders stimulates innovation, enables data-driven products and services, fuels economic growth and ideas, and is often the lifeline for remote communities. […]
Cross-Border Data Transfer Mechanisms
data sharing cross-border data transfers
Legislatures in many countries currently are drafting or amending data protection laws. Often, these drafts and amendments attempt to regulate cross-border data transfers by imposing restrictions on transfers of personal data to other countries that do not have similar data privacy laws. Sometimes they also include so-called data localization provisions that require data or copies […]