Home
Policies
Policy Index
Global Cross-Border Privacy Rules (CBPR)

Global Cross-Border Privacy Rules (CBPR)

What is the Global CBPR System?

The Cross-Border Privacy Rules (CBPR) System is an international system that certifies organizations’ compliance with certain program requirements for the cross-border transfer of personal data. Jurisdictions approved to participate in the system recognize Accountability Agents (AAs) and the AAs review and certify compliance of organizations based on their applications.

The CBPR System has operated under Asia-Pacific Economic Cooperation (APEC) since its inception. However, on April 21, 2022, the declaration of the establishment of the Global CBPR Forum—a framework that is not limited to jurisdictions in the APEC region, but open to those all over the world—was published for the purpose of facilitating cross-border transfer of personal data over a wider area and the promotion of interoperability of regulations among jurisdictions, thereby enabling participation from outside APEC. Following this, on April 30, 2024, the Forum published the documents that are necessary for the operationalization of the Global CBPR System, and on June 2, 2025, the Global CBPR System was launched, with AAs starting to grant certifications.

The Ministry of Economy, Trade and Industry (METI), together with the Personal Information Protection Commission (PPC), is proactively contributing to the efforts for expanding participation in the Forum and international discussions for disseminating the Global CBPR System.

Timeline

Participating Economies (as of October 24, 2025)

Members	Australia, Canada, Dubai International Financial Centre, Japan, the Republic of Korea, Mexico, the Philippines, Singapore, Chinese Taipei, the United States of America
Associates	Bermuda, Nigeria, Mauritius, the United Kingdom

Global CBPR-Certified Organizations

The following are the Global CBPR-certified organizations in Japan (as of June 2025):

IntaSect Communications, Inc.
Paidy Inc.
Internet Initiative Japan Inc.
PayPay Corporation

All Global CBPR-certified organizations, including those outside Japan, can be found on the Global CBPR Forum website.

Global CBPR Forum

Accountability Agents (AA)

In Japan, the Japan Institute for Promotion of Digital Economy and Community (JIPDEC) has been approved as an AA.
Organizations considering applying for CBPR certification are encouraged to visit the JIPDEC website.

JIPDEC web-site

Related Materials

APEC CBPR System

The APEC CBPR System is an international system that certifies organizations’ compliance with the APEC Privacy Framework. Economies may apply to join the system, and jurisdictions approved to participate recognize AAs, which review and certify compliance of organizations in their jurisdictions with the APEC Privacy Framework based on their applications. Japan was approved to participate in the system in 2014, and in January 2016, JIPDEC was recognized as an AA. In December 2016, JIPDEC granted its first CBPR certification.

Research Reports

Division in Charge

Office of International Affairs, Commerce and Information Policy Bureau

Download(To Adobe site)

Last updated:2026-04-22