Understanding APEC: Nuts and Bolts _HK.pdftrade •United States and Mexico are participating...
Transcript of Understanding APEC: Nuts and Bolts _HK.pdftrade •United States and Mexico are participating...
![Page 1: Understanding APEC: Nuts and Bolts _HK.pdftrade •United States and Mexico are participating economies. Japan’s ... •Secrets . Accountability •Information controller accountable](https://reader034.fdocuments.in/reader034/viewer/2022050222/5f67bb143f769a0e9c34c37b/html5/thumbnails/1.jpg)
Understanding APEC: Nuts and Bolts
IAPP
31 March 2014
Allen Brandt
Chief Privacy Official
Graduate Management Admission Council
Scott Thiel Foreign Legal Consultant DLA Piper
![Page 2: Understanding APEC: Nuts and Bolts _HK.pdftrade •United States and Mexico are participating economies. Japan’s ... •Secrets . Accountability •Information controller accountable](https://reader034.fdocuments.in/reader034/viewer/2022050222/5f67bb143f769a0e9c34c37b/html5/thumbnails/2.jpg)
Agenda
• US-Europe-Asia • What’s the difference?
• APEC Privacy Framework
• EU-APEC Referential
![Page 3: Understanding APEC: Nuts and Bolts _HK.pdftrade •United States and Mexico are participating economies. Japan’s ... •Secrets . Accountability •Information controller accountable](https://reader034.fdocuments.in/reader034/viewer/2022050222/5f67bb143f769a0e9c34c37b/html5/thumbnails/3.jpg)
US-Europe-Asia What’s the difference?
• US: sectorial rules • HIPPA, GLBA, FCRA, etc.
• Europe: privacy as a fundamental right • Comprehensive requirements
• Asia: somewhere in between
![Page 4: Understanding APEC: Nuts and Bolts _HK.pdftrade •United States and Mexico are participating economies. Japan’s ... •Secrets . Accountability •Information controller accountable](https://reader034.fdocuments.in/reader034/viewer/2022050222/5f67bb143f769a0e9c34c37b/html5/thumbnails/4.jpg)
Asia Regulatory Developments • Broader than the US, generally less restrictive
than the EU
• Rapidly changing environment
• Watch for both formal laws and local regulations
![Page 5: Understanding APEC: Nuts and Bolts _HK.pdftrade •United States and Mexico are participating economies. Japan’s ... •Secrets . Accountability •Information controller accountable](https://reader034.fdocuments.in/reader034/viewer/2022050222/5f67bb143f769a0e9c34c37b/html5/thumbnails/5.jpg)
APEC Cross Border Privacy Rules System
www.cbprs.org
![Page 6: Understanding APEC: Nuts and Bolts _HK.pdftrade •United States and Mexico are participating economies. Japan’s ... •Secrets . Accountability •Information controller accountable](https://reader034.fdocuments.in/reader034/viewer/2022050222/5f67bb143f769a0e9c34c37b/html5/thumbnails/6.jpg)
APEC Cross Border Privacy Rules System
• Designed with same principles in mind that formed the basis for the U.S.-EU Safe Harbor Framework, the OECD Privacy Framework and the EU Directive
• 21 member economies of APEC comprise a market of 2.7 billion consumers, 55 %of world real domestic gross product, 44 % of world trade
• United States and Mexico are participating economies. Japan’s application is almost complete and Canada intends to apply shortly
• US contact: Christopher Hoff, Policy Advisor for Asia Privacy Initiatives [email protected]
![Page 7: Understanding APEC: Nuts and Bolts _HK.pdftrade •United States and Mexico are participating economies. Japan’s ... •Secrets . Accountability •Information controller accountable](https://reader034.fdocuments.in/reader034/viewer/2022050222/5f67bb143f769a0e9c34c37b/html5/thumbnails/7.jpg)
Privacy as an Economic Engine
The lack of consumer trust and confidence in the privacy and security of online transactions and information networks is one element that may prevent member economies from gaining all of the benefits of electronic commerce.
APEC economies realize that a key part of efforts to improve consumer confidence and ensure the growth of electronic commerce must be cooperation to balance and promote both effective information privacy protection and the free flow of information in the Asia Pacific region.
![Page 8: Understanding APEC: Nuts and Bolts _HK.pdftrade •United States and Mexico are participating economies. Japan’s ... •Secrets . Accountability •Information controller accountable](https://reader034.fdocuments.in/reader034/viewer/2022050222/5f67bb143f769a0e9c34c37b/html5/thumbnails/8.jpg)
Personal Information
• Any information about an identified or identifiable individual.
• Natural, living persons • Not corporations
• Includes information that when added together, can identify an individual
![Page 9: Understanding APEC: Nuts and Bolts _HK.pdftrade •United States and Mexico are participating economies. Japan’s ... •Secrets . Accountability •Information controller accountable](https://reader034.fdocuments.in/reader034/viewer/2022050222/5f67bb143f769a0e9c34c37b/html5/thumbnails/9.jpg)
APEC information privacy principles • Preventing Harm
• Notice
• Collection Limitation
• Uses of Personal Information
• Choice
• Integrity of Personal Information
• Security Safeguards
• Access and Correction
• Accountability
http://publications.apec.org/publication-detail.php?pub_id=390
![Page 10: Understanding APEC: Nuts and Bolts _HK.pdftrade •United States and Mexico are participating economies. Japan’s ... •Secrets . Accountability •Information controller accountable](https://reader034.fdocuments.in/reader034/viewer/2022050222/5f67bb143f769a0e9c34c37b/html5/thumbnails/10.jpg)
Preventing Harm
• Legitimate expectation of privacy
• Measures proportional to likelihood & severity of harm
• Design systems to minimize wrongful collection and misuse • Consider a Privacy Impact Assessment & Privacy by Design
![Page 11: Understanding APEC: Nuts and Bolts _HK.pdftrade •United States and Mexico are participating economies. Japan’s ... •Secrets . Accountability •Information controller accountable](https://reader034.fdocuments.in/reader034/viewer/2022050222/5f67bb143f769a0e9c34c37b/html5/thumbnails/11.jpg)
Notice
• Clear and assessable statements: • Information being collected
• Purposes
• All potential disclosures
• Identity & contact details of information controller
• Available choices
• Website notices, employee handbook, mobile apps • At or near the time of collection
![Page 12: Understanding APEC: Nuts and Bolts _HK.pdftrade •United States and Mexico are participating economies. Japan’s ... •Secrets . Accountability •Information controller accountable](https://reader034.fdocuments.in/reader034/viewer/2022050222/5f67bb143f769a0e9c34c37b/html5/thumbnails/12.jpg)
Collection Limitation
• Collection relevant to the purpose and proportionate
• Methods that are lawful and fair
• What about Big Data?
![Page 13: Understanding APEC: Nuts and Bolts _HK.pdftrade •United States and Mexico are participating economies. Japan’s ... •Secrets . Accountability •Information controller accountable](https://reader034.fdocuments.in/reader034/viewer/2022050222/5f67bb143f769a0e9c34c37b/html5/thumbnails/13.jpg)
Uses of Personal Information
• Information used only for the purposes stated when collected
• Consider user consent
• Necessary to fulfill requested product or service
• Law enforcement
![Page 14: Understanding APEC: Nuts and Bolts _HK.pdftrade •United States and Mexico are participating economies. Japan’s ... •Secrets . Accountability •Information controller accountable](https://reader034.fdocuments.in/reader034/viewer/2022050222/5f67bb143f769a0e9c34c37b/html5/thumbnails/14.jpg)
Choice
• Choice in relation to collection, use, transfer and disclosure of personal information • Clear
• Prominent
• Easily understandable • languages
• Accessible
• Affordable mechanisms
![Page 15: Understanding APEC: Nuts and Bolts _HK.pdftrade •United States and Mexico are participating economies. Japan’s ... •Secrets . Accountability •Information controller accountable](https://reader034.fdocuments.in/reader034/viewer/2022050222/5f67bb143f769a0e9c34c37b/html5/thumbnails/15.jpg)
Integrity of Personal Information
• Information accurate, complete, up to date
• Very important if you are making decisions about individuals
![Page 16: Understanding APEC: Nuts and Bolts _HK.pdftrade •United States and Mexico are participating economies. Japan’s ... •Secrets . Accountability •Information controller accountable](https://reader034.fdocuments.in/reader034/viewer/2022050222/5f67bb143f769a0e9c34c37b/html5/thumbnails/16.jpg)
Security Safeguards
• Safeguards appropriate to the risk, sensitivity, likelihood of harm
• Privacy Impact Assessments and Privacy by Design
• Periodic review
![Page 17: Understanding APEC: Nuts and Bolts _HK.pdftrade •United States and Mexico are participating economies. Japan’s ... •Secrets . Accountability •Information controller accountable](https://reader034.fdocuments.in/reader034/viewer/2022050222/5f67bb143f769a0e9c34c37b/html5/thumbnails/17.jpg)
Access & Correction • Individuals should be able to know what information is being held
• Reasonable time
• Costs
• Reasonable manner
• Understood form
• Get proof of identity
• Allow people to challenge and correct the data
• Exceptions • Burden on company
• Secrets
![Page 18: Understanding APEC: Nuts and Bolts _HK.pdftrade •United States and Mexico are participating economies. Japan’s ... •Secrets . Accountability •Information controller accountable](https://reader034.fdocuments.in/reader034/viewer/2022050222/5f67bb143f769a0e9c34c37b/html5/thumbnails/18.jpg)
Accountability
• Information controller accountable for compliance
• Demonstrate enforceability, promotes user trust
• Third parties • Vendor management
• Selection
• Contract provisions
• Audits
• Privacy program management
![Page 19: Understanding APEC: Nuts and Bolts _HK.pdftrade •United States and Mexico are participating economies. Japan’s ... •Secrets . Accountability •Information controller accountable](https://reader034.fdocuments.in/reader034/viewer/2022050222/5f67bb143f769a0e9c34c37b/html5/thumbnails/19.jpg)
EU-APEC Referential • Goal: facilitate cross border data flows between Asia, Europe and the
United States
• NOT mutual recognition • Potential basis for double certification
• Adequate Protection-enforceable obligation
• Scope of protection
• Third parties
• Sensitive information
• Transparency
http://www.apec.org/~/media/Files/Groups/ECSG/20140307_Referential-BCR-CBPR-reqs.pdf
![Page 20: Understanding APEC: Nuts and Bolts _HK.pdftrade •United States and Mexico are participating economies. Japan’s ... •Secrets . Accountability •Information controller accountable](https://reader034.fdocuments.in/reader034/viewer/2022050222/5f67bb143f769a0e9c34c37b/html5/thumbnails/20.jpg)
Scott Thiel Allen Brandt
Foreign Legal Consultant Chief Privacy Official
DLA Piper Graduate Management Admission Council +852 2103 0519 +1 703.668.9719