APEC Cross Border Privacy Rules (CBPR) & Privacy Recognition for Processors (PRP)

BSI as an approved Assessment Body (AB) by Infocomm Media Development Authority (IMDA) to support organizations in assessing their data protection practices is consistent with the APEC Privacy Framework. These certifications facilitate how your business can seamlessly exchange personal data across Asia-Pacific Economic Cooperation (APEC) member economies while respecting privacy and security. 

 

About CBPR Certification

Endorsed by APEC to facilitate personal data flows among APEC economies and to demonstrate accountability in data protection. This applies to organizations (data controllers) that control the collection, holding, processing, or use of personal data. 

 

About PRP Certification

Designed for organizations (data processors) who process data on behalf of client organizations (data controllers), to demonstrate their ability in complying with relevant privacy obligations. 

CBPR certification is based on nine privacy principles from the APEC Privacy Framework:

  • Accountability
  • Prevent Harm
  • Notice
  • Choice
  • Collection Limitation
  • Use of Personal Information
  • Integrity of Personal Information
  • Security Safeguards
  • Access and Correction

 

PRP Certification is based on two of the principles: Security Safeguards and Accountability. 

How will CBPR or PRP certification benefit your organization:

  • Reduce cost and time with a single and consistent set of privacy standards that facilitates international data flows
  • Build trust and confidence by demonstrating a high-standard commitment to data protection among your business counterparts and customers
  • Provide assurance through third-party certification that improves and validates your data protection standards
  • Demonstrate good faith compliance to enforcement authorities