A Convention 108-CBPR Guide to Trans-Border Data Flows

No ratings

Presented at GlobalPrivacySummit 2019 by

The Convention for the Protection of Individuals with regard to Automatic Processing of Personal Data (also known as “Convention 108”) is the sole treaty in the field of data protection. To date, 53 countries have joined Convention 108: the 47 member states of the Council of Europe as well as Cabo Verde, Mauritius, Mexico, Senegal, Tunisia and Uruguay. Furthermore, the EU General Data Protection Regulation entered into application on May 25, 2018. The EDPB has been working on a number of important subjects having impact outside of the EU, such as guidelines on the territorial scope of the GDPR application, new adequacy decisions proposed and the development of new tools for international transfers. In 2018, Convention 108 was updated with a key focus on the issue of "trans-border data flows." At the same time, Asia-Pacific countries have been working to establish the Cross-Border Privacy Rules (CBPR) System, a trans-border data transfer mechanism developed by the Asia-Pacific Economic Cooperation (APEC) to build consumer, business and regulator trust in cross-border flows of personal information. To date, six economies have joined: Canada, Japan, South Korea, Mexico, Singapore and the United States. Learn more about the history and future of both frameworks, their commonality and impact across nearly 60 jurisdictions and how they can be used to help build a globally-scoped privacy program.What you’ll take away:Quick update on Convention 108+ and CBPR tools for data transfersInsights on common featuresTips for a sound global privacy program