Cybersecurity Policy Report, International Group Aims to Simplify Cross-Border Data Protections, (Jun 2, 2025)

By Tony Foley

The Global Cross-Border Privacy Rules (CPBR) Forum has officially launched the Global CPBR and Privacy Recognition for Processors (PRP) certification systems, which are designed to provide a “simple and transparent means for organizations to ensure the protection of personal information that moves across jurisdictions, fostering trust in cross-border data flows.”

In a news release, the CPBR Forum said the Global CPBR and PRP systems will launch today, with about 100 certified companies, representing more than 2,000 entities, on board and certified. Organizations seeking to gain certification must undergo assessments by approved accountability agents (AAs), third-party entities that verify compliance with the Global CPBR and PRP program requirements, ensuring that they adhere to consistent baseline data protection and privacy requirements.

“With the launch of these certifications,” the news release says, “the Global CBPR Forum has demonstrated its commitment to helping bridge different regulatory approaches to data protection and privacy, offering organizations a robust system based on trust and accountability to navigate the complexities of cross-border data flows.”

The release further notes that the CPBR Forum will update the Global CPBR and PRP program provisions to include additional requirements on sensitive personal information, children’s personal information and data breach notification, as part of its work program for 2025-2026. The CBPR Forum expects that by year-end, it will develop a process and timeline to implement these updates in consultation with AAs, certified organizations, and other stakeholders to enable companies to demonstrate compliance with the updated requirements.

News: InternationalLegislation DataPrivacy DataSecurity