Privacy Map

Association of Southeast Asian Nations (ASEAN). Data localisation / cross-border. Guidelines / model clauses

ASEAN DMF / MCCsASEAN Digital Data Governance Framework, ASEAN Data Management Framework and ASEAN Model Contractual Clauses for Cross Border Data Flows

In force

§1Summary

Synopsis

The DMF is a voluntary guide for businesses on data governance across the data lifecycle. The MCCs are voluntary template contract terms for controller-to-controller and controller-to-processor transfers between ASEAN member states, setting baseline protections.

Key themes
  • model contractual clauses
  • cross-border flows
  • data governance
  • processor terms
Unique features

They are designed as a regional baseline. A joint EU–ASEAN guide maps the MCCs against the EU SCCs.

SaaS relevance

A SaaS provider can use the ASEAN MCCs as a transfer and processor contract template for intra-ASEAN data flows.

§2Obligations

Breach notification
MCCs: processor notifies controller of breaches
DPO
No
Cross-border transfers
Voluntary model clauses
Maximum penalty
None

§3Dates

Key dates
  • Adopted
  • In force
  • Framework on Digital Data Governance 2018; DMF and MCCs endorsed by the 1st ASEAN Digital Ministers' Meeting on 2021-01-22; joint EU–ASEAN guide on MCCs/SCCs in 2023

§4Text and authority

Text
Authority
ASEAN Digital Ministers (ADGMIN)

§5Where it applies

Members of the body

Membership-based — check ratification status. Membership of Association of Southeast Asian Nations (ASEAN) does not mean a state has signed or ratified this instrument.

§6Sources and verification

Sources consulted
Verification

High confidence.

The 2018 DDG Framework date and the 2023 EU–ASEAN guide come from memory.