Association of Southeast Asian Nations (ASEAN). Treaty / framework. Framework (non-binding)

ASEAN PDP FrameworkASEAN Framework on Personal Data Protection

In force

Partly verified

Medium confidence. I did not re-verify the exact adoption date or the asean.org PDF URL.

§1Summary

Synopsis

A statement of intent by ASEAN members to cooperate on personal data protection. It sets out principles: consent, notification and purpose; accuracy; security; access and correction; transfers to other countries; retention; and accountability. It creates no legal obligations.

Key themes

principles
consent
transfers
accountability
regional cooperation

Unique features

Expressly non-binding and leaves room for domestic law; it is the basis of ASEAN cross-border data instruments.

SaaS relevance

Background only; national ASEAN laws apply.

§2Obligations

Breach notification: None
DPO: No
Cross-border transfers: Consent or reasonable steps to protect data abroad
Maximum penalty: None

§3Dates

Key dates

Adopted 25 November 2016
In force 25 November 2016
Adopted at the 16th ASEAN Telecommunications and IT Ministers Meeting (TELMIN), November 2016

§4Text and authority

Text

Authoritative text asean.org

Authority

ASEAN Digital Ministers (ADGMIN) / ASEAN Digital Senior Officials

§5Where it applies

Members of the body

Membership-based — check ratification status. Membership of Association of Southeast Asian Nations (ASEAN) does not mean a state has signed or ratified this instrument.

§6Sources and verification

Sources consulted

pdpc.gov.sg

Verification

Medium confidence.

Partly verified

Medium confidence. I did not re-verify the exact adoption date or the asean.org PDF URL.