APEC Privacy Framework

The APEC Privacy Framework aims to promote a consistent approach to information privacy protection across APEC member economies, while avoiding the creation of unnecessary barriers to information flows.  The aim is to have protections consistent across the region which will place APEC at the forefront of e-commerce.

Consistent with the OECD Privacy Guidelines, the Privacy Framework’s principles and implementation guidance are focused on the achievement of four main goals:

(i) to develop appropriate privacy protections for personal information

(ii) to prevent the creation of unnecessary barriers to information flows

(iii) to enable multinational businesses to implement uniform approaches to the collection, use and processing of data and

(iv) to facilitate both domestic and international efforts to promote and enforce information privacy protections.

The Privacy Framework was endorsed by APEC Ministers in Chile in December 2004.  The Privacy Framework consists of four parts: Part I is a preamble; Part II deals with the scope of the principles; Part III contains the nine privacy principles, and Part IV deals with implementation of the principles.  A commentary has been published alongside the sections of Parts II and III to provide further information and context.

APEC Cross-border Privacy Enforcement Arrangement

The new APEC Cross-border Privacy Enforcement Arrangement (CPEA) commenced on 16 July 2010. The Office of the Privacy Commissioner (Australia) is one of four co-Administrators for the CPEA, along with the New Zealand Office of the Privacy Commissioner, the United States Federal Trade Commission and the APEC Secretariat.

The CPEA will provide a framework for privacy regulators to cooperate, and to seek information and advice from each other on cross-border enforcement matters. Any Privacy Enforcement Authority in an APEC economy may participate (e.g. Privacy Commissioners' Offices, Data Protection Authorities or Consumer Protection Authorities that enforce privacy laws).

The CPEA has been developed as part of the Data Privacy Pathfinder initiative, established to progress the implementation of the APEC Privacy Framework. The CPEA was endorsed by APEC Ministers in November 2009.

In accordance with the CPEA, the Office has published its Summary Statement of Privacy Enforcement Authority enforcement practices, policies and activities (June 2010).

A fact sheet on the CPEA is available here.

Other information

• Electronic Commerce Steering Group on the APEC website (including the APEC Privacy Framework)
• Attorney-General's Department webpage on APEC Privacy