Innovation minister announces consultation on personal information protection initiative

It will investigate the implementation of certifications to protect data flowing across borders
Innovation minister announces consultation on personal information protection initiative

Minister of Innovation, Science and Industry François-Philippe Champagne has announced a consultation on implementing the Global Cross-Border Privacy Rules (CBPR) Forum’s international privacy certifications.

The certifications include the Global CBPR System and the Global Privacy Recognition for Processors System. They can reflect privacy compliance across borders, driving smooth international trade while protecting Canadians’ privacy rights.

The implementation will bolster trust and improve transparency in cross-border personal information flows. It is also expected to help organizations develop comprehensive privacy management programs, hold organizations to high privacy protection standards, and boost innovation and growth.

With the expansion of the Global CBPR Forum's membership, the implementation will also generate access to international market players like Japan and South Korea.

“Canadians deserve to know that their data is safe and secure, and our government is committed to doing our part to deliver greater trust and transparency in the global digital economy,” Champagne said in a statement. “Implementing the Global Cross-Border Privacy Rules Forum's certifications in the Canadian marketplace will not only strengthen privacy rights for Canadians but also connect Canadian businesses to new and reliable opportunities with our international partners.”

The feedback will inform the government’s approach to the certifications’ implementation. The consultation is open to organizations regulated by the Personal Information Protection and Electronics Document Act or substantially similar legislation, organizations interested in being a certification body, and other interested parties.

The consultation period will close on June 30.

The CBPR Forum was established in 2022 by Canada, Chinese Taipei, Japan, the Philippines, the Republic of Korea, Singapore, and the US. The forum’s principles and objectives, including those underpinning the certifications, were laid out in the 2022 Global CBPR Declaration and its 2023 Framework.

The Office of the Privacy Commissioner of Canada has also joined the Global Cooperation Arrangement for Privacy Enforcement, which allows participants to cooperate in cross-border data protection and privacy enforcement.