29e CONFÉRENCE INTERNATIONALE DES COMMISSAIRES À LA PROTECTION DES DONNÉES ET DE LA VIE PRIVÉE 29 th INTERNATIONAL CONFERENCE OF DATA PROTECTION AND PRIVACY COMMISSIONERS 29e Confrence internationale des commissaires à la protection de la vie prive

29e CONFÉRENCE INTERNATIONALE DES COMMISSAIRES À LA PROTECTION DES DONNÉES ET DE LA VIE PRIVÉE 29 th INTERNATIONAL CONFERENCE OF DATA PROTECTION AND PRIVACY COMMISSIONERS 29e Confrence internationale des commissaires à la protection de la vie prive Bringing the Corners Together: The APEC Privacy Framework Making Privacy Work Around the Pacific Mr. Colin Minihan Principal Legal Officer, Information Law Branch, Attorney-Generals Department, Australia

29e CONFÉRENCE INTERNATIONALE DES COMMISSAIRES À LA PROTECTION DES DONNÉES ET DE LA VIE PRIVÉE 29 th INTERNATIONAL CONFERENCE OF DATA PROTECTION AND PRIVACY COMMISSIONERS 29e Confrence internationale des commissaires à la protection de la vie prive Privacy in APEC 21 economies in the Asia-Pacific region - uses cooperation, not treaties The APEC Privacy Framework - based on OECD Guidelines - principles based, practical focus - endorsed by Ministers in Santiago in 2004

29e CONFÉRENCE INTERNATIONALE DES COMMISSAIRES À LA PROTECTION DES DONNÉES ET DE LA VIE PRIVÉE 29 th INTERNATIONAL CONFERENCE OF DATA PROTECTION AND PRIVACY COMMISSIONERS 29e Confrence internationale des commissaires à la protection de la vie prive Implementation of the Framework Guidance for domestic implementation - flexible, focus on compatibility Guidance for international implementation: - information sharing among economies - cooperation in investigation + enforcement - business use of cross-border privacy rules

29e CONFÉRENCE INTERNATIONALE DES COMMISSAIRES À LA PROTECTION DES DONNÉES ET DE LA VIE PRIVÉE 29 th INTERNATIONAL CONFERENCE OF DATA PROTECTION AND PRIVACY COMMISSIONERS 29e Confrence internationale des commissaires à la protection de la vie prive Cross-Border Privacy Rules What does it mean? Who participates? How does it work? Is there a regulator?

29e CONFÉRENCE INTERNATIONALE DES COMMISSAIRES À LA PROTECTION DES DONNÉES ET DE LA VIE PRIVÉE 29 th INTERNATIONAL CONFERENCE OF DATA PROTECTION AND PRIVACY COMMISSIONERS 29e Confrence internationale des commissaires à la protection de la vie prive The Data Privacy Pathfinder A Pathfinder tests practical implementation issues We are approaching the problem of cross- border data flows by slicing it into manageable sections Nine specific projects under consideration

29e CONFÉRENCE INTERNATIONALE DES COMMISSAIRES À LA PROTECTION DES DONNÉES ET DE LA VIE PRIVÉE 29 th INTERNATIONAL CONFERENCE OF DATA PROTECTION AND PRIVACY COMMISSIONERS 29e Confrence internationale des commissaires à la protection de la vie prive Privacy Regulators in APEC APEC economies are diverse, and include: - Privacy Commissioners in Australia, Canada, Hong Kong China, New Zealand, Republic of Korea, Russia - Regulators with a privacy role in Japan, Mexico, Singapore, the United States

29e CONFÉRENCE INTERNATIONALE DES COMMISSAIRES À LA PROTECTION DES DONNÉES ET DE LA VIE PRIVÉE 29 th INTERNATIONAL CONFERENCE OF DATA PROTECTION AND PRIVACY COMMISSIONERS 29e Confrence internationale des commissaires à la protection de la vie prive The Role of Regulators Regulators ensure accountability, the key principle underpinning the CBPR system Encourage regulators to work with business, trustmarks and consumers Encouraging regulator co-operation and information exchange across borders

29e CONFÉRENCE INTERNATIONALE DES COMMISSAIRES À LA PROTECTION DES DONNÉES ET DE LA VIE PRIVÉE 29 th INTERNATIONAL CONFERENCE OF DATA PROTECTION AND PRIVACY COMMISSIONERS 29e Confrence internationale des commissaires à la protection de la vie prive Coordination with International Bodies OECD participating in APEC Data Privacy Sub-Group meetings as a member Important WPISP work on cross-border information sharing and enforcement Working with other organisations helps build a better result for everybody

29e CONFÉRENCE INTERNATIONALE DES COMMISSAIRES À LA PROTECTION DES DONNÉES ET DE LA VIE PRIVÉE 29 th INTERNATIONAL CONFERENCE OF DATA PROTECTION AND PRIVACY COMMISSIONERS 29e Confrence internationale des commissaires à la protection de la vie prive The Sydney Resolution The APEC Privacy Framework is the principal international text in the region Sub-Group develops and sets privacy policy Each year the APEC host economy changes This is an opportunity to raise awareness of privacy issues in that economy

29e CONFÉRENCE INTERNATIONALE DES COMMISSAIRES À LA PROTECTION DES DONNÉES ET DE LA VIE PRIVÉE 29 th INTERNATIONAL CONFERENCE OF DATA PROTECTION AND PRIVACY COMMISSIONERS 29e Confrence internationale des commissaires à la protection de la vie prive APEC 2008 and beyond Two key strands to our work: - Pathfinder projects - engagement with the OECD Strong education and collaboration theme to our work - two workshops will be held in Peru