Personal Data Protection Commission: Addition of Global CBPR System to the APPI Guidelines for Cross-Border Transfers of Personal Information

Japan’s data protection authority has updated its guidelines to include the Global Cross Border Privacy Rules System (“Global CBPR System”) as a valid mechanism for international personal data transfers under the APPI. The inclusion of the Global CBPR System provides multi-national companies with an additional, streamlined mechanism for enabling compliant cross border data transfers, particularly where overseas recipients have a sufficiently robust data management system which qualifies for Global CBPR certification.