APEC Cross-Border Privacy Rules (CBPR) System CBPR-09: Preventing Harm

What else in your programme already covers this

This control maps to 23 controls across 14 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.

Cloud Security Alliance Cloud Controls Matrix (CCM) v4.0.1 · 3 controls

CCM-DSP-07 Data Protection by Design and Default
CCM-DSP-08 Data Privacy by Design and Default
CCM-DSP-09 Data Protection Impact Assessment

HIPAA Security Rule · 3 controls

164.306 Security Standards: General Rules
164.308(a)(1)(ii)(A) Risk Analysis (Required)
164.308(a)(1)(ii)(B) Risk Management (Required)

Azure Security Benchmark · 2 controls

ASBv3-DP-1 Discover, classify, and label sensitive data
ASBv3-GS-3 Define and implement data protection strategy

CCPA/CPRA · 2 controls

§1798.150 Private Right of Action for Data Breaches
§1798.185(a)(15) Risk Assessments for High-Risk Processing

GDPR · 2 controls

GDPR-Art.25 Data protection by design and by default
GDPR-Art.35 Data protection impact assessment

ISO 27701:2019 · 2 controls

5.4.1 Actions to address risks and opportunities
7.2.5 Privacy impact assessment

NIST SP 800-66 Rev 2 · 2 controls

164.308(a)(1)(ii)(A) Risk Analysis (Required)
164.308(a)(1)(ii)(B) Risk Management (Required)

APPI · 1 control

APPI-A19 Prohibition of Improper Use

Australia Consumer Data Right - Banking (CDR) · 1 control

AUCDR-PS-12 Privacy Safeguard 12 - Security of CDR data and destruction or de-identification of redundant CDR data

Australia My Health Records Act 2012 · 1 control

MYHR-CUD-6 Prohibition on use for a prohibited purpose

C5 (Germany) · 1 control

C5-OIS-06 Risk Management Policy

FedRAMP High · 1 control

SA-8 Security and Privacy Engineering Principles

FedRAMP Moderate · 1 control

SA-8 Security and Privacy Engineering Principles

NIST SP 800-53 Rev 5 · 1 control

NIST800-RA-8 RA-8 Privacy Impact Assessments

Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.

You are reading one control. How much of APEC Cross-Border Privacy Rules (CBPR) System have you already done?

APEC Cross-Border Privacy Rules (CBPR) System CBPR-09 is one control. If you already hold one of the frameworks below, a reviewed crosswalk already says how much of APEC Cross-Border Privacy Rules (CBPR) System your existing evidence covers. Hold GDPR and 43 of 59 APEC Cross-Border Privacy Rules (CBPR) System controls already carry evidence.

If you hold GDPR72.9% covered · 16 gaps If you hold ISO 27701:201967.8% covered · 19 gaps If you hold APPI64.4% covered · 21 gaps If you hold Australia Consumer Data Right - Banking (CDR)55.9% covered · 26 gaps If you hold CCPA/CPRA55.9% covered · 26 gaps If you hold Australian Privacy Principles (APPs)47.5% covered · 31 gaps

Each report names every control your existing framework evidences, every one it does not, the reasoning behind each claim, and the claims that were argued against and rejected. 0 were rejected on the GDPR pair alone.

See the released pairs, $299 each Browse the graph free