Global Cross-Border Privacy Rules (CBPR) Forum Publishes Documents (such as Policies, Rules, and Guidelines) for Operationalization of the Global CBPR System

The CBPR System is an international system that certifies organizations’ compliance with certain program requirements for the cross-border transfer of personal data. Jurisdictions approved to participate in the system recognize the Accountability Agents and the Accountability Agents review and certify compliance of organizations based on their applications.

The CBPR System has been operated as a system under the APEC since its inception. However, on April 21, 2022, the declaration of establishment of the Global CBPR Forum (hereinafter referred to as the “Forum”) —a framework that is not limited to jurisdictions in the APEC region, but open to those in all over the world—was published for the purpose of facilitating cross-border transfer of personal data over a wider area and the promotion of interoperability of regulations among jurisdictions. Since the establishment, ten jurisdictions, including Japan, have been advancing efforts to build a new certification system for organizations under the Forum, aiming to make personal data transfer smoother over a wider area.

Following this, on April 30, 2024, the Forum published the following documents that are necessary for the operationalization of the Global CBPR System.

• Global CBPR and Global PRP Systems Policies, Rules, and Guidelines
• Global CBPR Forum Accountability Agent Recognition Application
• Global CBPR System Program Requirements
• Global CBPR System Intake Questionnaire

In addition, the Forum approved Accountability Agents, which have been active under APEC CBPR System, as also being active under the Global CBPR System, including JIPDEC in Japan. Going forward, the Global CBPR System is expected to start its operation around June 2024 after the preparations by Accountability Agents are completed to start granting certifications.

Moreover, regarding cooperation arrangement in cross-border enforcement between privacy enforcement authorities, which is a foundation of the Global CBPR System, the Forum published a list of the 27 participating authorities, including the 3 first new participants from the non-APEC regions.

METI, together with PPC, will continue to proactively contribute to the efforts for expanding the participation in the Forum and international discussions for disseminating the Global CBPR System.

Related Materials

• Policies, Rules, and Guidelines
• Accountability Agent Recognition Application
• Program Requirements
• Intake Questionnaire

Related Links

• The Global CBPR Forum news release (April 30, 2024)
• Agreement Reached on Declaration to Establish the Global Cross Border Privacy Rules (CBPR) Forum (April 21, 2022)

Division in Charge

Office of International Affairs, Commerce and Information Policy Bureau