Privacy Map

Asia-Pacific Economic Cooperation (APEC). Treaty / framework. Framework (non-binding)

APEC Privacy Framework

In force
Partly verifiedMedium confidence. I did not re-check the publication URL this session.

§1Summary

Synopsis

A non-binding set of nine information privacy principles for the 21 APEC economies, adapted from the OECD Guidelines: preventing harm, notice, collection limitation, uses, choice, integrity, security safeguards, access and correction, and accountability. It aims to protect privacy while keeping information flowing across the region.

Key themes
  • preventing harm
  • notice
  • choice
  • accountability
  • cross-border privacy enforcement
  • interoperability
Unique features

Its harm-based, accountability-led model contrasts with the rights-based European approach. It is the basis of the CBPR and PRP certification systems.

SaaS relevance

It underpins CBPR and PRP certifications, which SaaS providers can use to show compliance and support transfers in participating economies.

§2Obligations

Breach notification
None
DPO
No
Cross-border transfers
Accountability-based; CBPR system
Maximum penalty
None

§3Dates

Key dates
  • Adopted
  • In force
  • Endorsed by APEC Ministers in 2004 and published in 2005; updated in 2015 (endorsed 2016)

§4Text and authority

Text
Authority
APEC Digital Economy Steering Group (DESG) Data Privacy Subgroup

§5Where it applies

Members of the body

Membership-based — check ratification status. Membership of Asia-Pacific Economic Cooperation (APEC) does not mean a state has signed or ratified this instrument.

§6Sources and verification

Sources consulted
Verification

Medium confidence.

Partly verifiedMedium confidence. I did not re-check the publication URL this session.