TRUSTe APEC CBPR and PRP
Privacy Certifications

Demonstrate your commitment to high privacy standards with the APEC Cross Border Privacy Rules (CBPR) and Privacy Recognition for Processors (PRP) Certifications.

The Asia-Pacific Economic Cooperation (APEC) CBPR framework is a voluntary, enforceable program designed to ensure the continued free flow of personal information across APEC member economy borders, while establishing meaningful protection for the privacy and security of personal information. It is the first framework approved for the transfer of personal data between all APEC Member countries, with the U.S. being the first formal participant and the Federal Trade Commission (FTC) serving as the first enforcement authority.

APEC CBPR and PRP Certification

TRUSTe is an Accountability Agent approved to certify data transfer practices under the APEC Cross-Border Privacy Rules (CBPR) framework for data controllers, and the APEC Privacy Recognition for Processors (PRP) framework for data processors.

To view examples of APEC CBPR and APEC PRP Certified companies click here.

Assessment Process

Privacy Assessments provide the information required to understand and remediate compliance risks. A member of the Global Privacy Solutions (GPS) team will guide you through the process, utilizing our proven methodology and powerful technology.


Privacy Review

The first step is to define the assessment scope by business units, product/service lines, and digital properties (websites, apps, cloud platforms). The Global Privacy Solutions team works with your team to efficiently guide discovery of necessary information, including relevant data flows and evaluation of your privacy policies and practices against relevant standards.

Findings Report

A findings report is delivered which includes a gap analysis, risk summary and remediation recommendations. The report outlines actionable steps required to achieve compliance.

Searchable Audit Trail

All assessment work and supporting documentation is available in a searchable, central repository - providing a way to respond to inquiries and demonstrate compliance for internal / external audits.

Ongoing Monitoring and Guidance

Ongoing compliance monitoring is provided throughout the term of the agreement. Access is provided to privacy experts for ongoing policy guidance along with educational webinars, events, whitepapers, client advisories, privacy tips and research.”

Dispute Resolution

Access to third-party dispute resolution service, which helps efficiently manage privacy inquiries from customers and addresses dispute handling compliance requirements.

TRUSTe Privacy Feedback Button

External demonstration to consumers, business partners and regulators that your company uses TrustArc technology and tools to manage privacy related questions or concerns. The Privacy Feedback Button may be placed on your digital Privacy Policy page and links to a mechanism for consumers to submit questions or feedback.

Privacy Feedback

Certification Process

Based on the information gleaned from the assessment, the Global Privacy Solutions team guides you through the remediation process, helping to ensure required changes are completed.


Remediation / Validation

Assistance with any necessary remediation steps, including providing relevant templates and process change advice. We then validate that your privacy statements accurately reflect your updated privacy practices and are consistent with applicable standards.

Letter of Attestation

As proof of TRUSTe Certification, an official Letter of Attestation can be shared with your business partners, providing your organization with competitive differentiation.

TRUSTe APEC Seal

After completing the required changes, we authorize your use of the TRUSTe APEC certification seal.

TRUSTe APEC CBPR seal
TRUSTe APEC PRP seal

For more information on the certification standards applicable to the APEC CBPR Certifications, please see here.

To view TRUSTe’s accountability agent participation document click here for APEC CBPR and here for APEC PRP.

What is APEC?

APEC stands for the Asia-Pacific Economic Cooperation. Established in 1989, APEC is a forum for 21 Pacific Rim member economies that promotes free trade throughout the Asia-Pacific region. Members include all countries that have a coastline along the Pacific Ocean, including China, Japan, and the United States. The criterion for membership is that the member is a “separate economy”, rather than a country - which expands coverage and extends membership to economic regions such as Taiwan and Hong Kong. The 21 APEC members represent over 40% of the world’s population and over 60% of global GDP. APEC has instituted a wide range of programs to help promote free trade across the region, including developing the APEC Privacy Framework which is designed to provide an accountable approach to managing data privacy protection and the flow of personal information across borders. Businesses can demonstrate their adherence to the APEC Privacy Framework by certifying their privacy practices to the following standards: Cross Border Privacy Rules (CBPR) System - which governs "data controller" privacy practices; or Privacy Recognition for Processors (PRP) System - which governs "data processor" privacy practices.

Click here to review the APEC CBPR Certification Program Requirements.

Click here to review the APEC PRP Certification Program Requirements.

Privacy Expertise - TrustArc
Proven Methodology - TrustArc
Powerful Technology - TrustArc

Deep Privacy Expertise + Proven Methodology + Powerful Technology

TrustArc solutions are powered by a unique combination of deep privacy expertise developed over two decades, proven methodologies refined through tens of thousands of engagements, and powerful technology operating at scale for eight years.

Enable safe global business expansion through APEC privacy-compliant data transfers.


Resources