APEC Cross Border Privacy Rules (CBPR) system

APEC Cross Border Privacy Rules (CBPR) system (2011) is a “voluntary accountability-based system to facilitate privacy-respecting data flows among APEC economies”.

As of August 2016 there are four participating APEC CBPR system economies: USA, Mexico, Japan and Canada.

It has four main components:

  • recognition criteria for organisations wishing to become an APEC CBPR system
  • a questionnaire for organisations that wish to be certified as APEC CBPR system compliant
  • assessment criteria for use by APEC CBPR system certified Accountability Agents when reviewing an organisation’s answers to the intake questionnaire
  • a regulatory cooperative arrangement (the CPEA) to ensure that each of the APEC CBPR system program requirements can be enforced by participating APEC economies


More on CBPR rules is available at http://www.cbprs.org…

More on APEC is available here