APEC Cross-Border Privacy Rules (CBPR) System CBPR-PR-39: Measures to ensure compliance

What else in your programme already covers this

This control maps to 21 controls across 15 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.

Australia Consumer Data Right - Banking (CDR) · 2 controls

AUCDR-IS-STEP1 Step 1 - Define and implement security governance for CDR data
AUCDR-PS-1 Privacy Safeguard 1 - Open and transparent management of CDR data

CCPA/CPRA · 2 controls

CCR §7060 Consumer Identity Verification
CCR §7100-7102 Recordkeeping Requirements

Cloud Security Alliance Cloud Controls Matrix (CCM) v4.0.1 · 2 controls

CCM-DSP-01 Security and Privacy Policy and Procedures
CCM-GRC-01 Governance Program Policy and Procedures

ISO 27701:2019 · 2 controls

5.2.4 Information security management system
5.3.2 Policy

NIST SP 800-161 Rev 1 · 2 controls

161R1-PM-18 Privacy Program Plan
161R1-PT-1 Policy and Procedures

NIST SP 800-53 Rev 5 · 2 controls

NIST800-PM-18 PM-18 Privacy Program Plan
NIST800-PT-1 PT-1 Policy and Procedures

APPI · 1 control

APPI-A40 Processing of Complaints

Australia My Health Records Act 2012 · 1 control

MYHR-REG-3 Conditions of registration and participation

Australian Privacy Principles (APPs) · 1 control

APP-1 APP 1 - Open and transparent management of personal information

C5 (Germany) · 1 control

C5-COM-01 Identification of applicable legal, regulatory, self-imposed or contractual requirements

FedRAMP High · 1 control

PL-2 System Security and Privacy Plans

GDPR · 1 control

GDPR-Art.24 Responsibility of the controller

HIPAA Security Rule · 1 control

164.316(a) Policies and Procedures (Standard)

NIST SP 800-66 Rev 2 · 1 control

164.316(a) Policies and Procedures (Standard)

Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.

You are reading one control. How much of APEC Cross-Border Privacy Rules (CBPR) System have you already done?

APEC Cross-Border Privacy Rules (CBPR) System CBPR-PR-39 is one control. If you already hold one of the frameworks below, a reviewed crosswalk already says how much of APEC Cross-Border Privacy Rules (CBPR) System your existing evidence covers. Hold GDPR and 43 of 59 APEC Cross-Border Privacy Rules (CBPR) System controls already carry evidence.

If you hold GDPR72.9% covered · 16 gaps If you hold ISO 27701:201967.8% covered · 19 gaps If you hold APPI64.4% covered · 21 gaps If you hold Australia Consumer Data Right - Banking (CDR)55.9% covered · 26 gaps If you hold CCPA/CPRA55.9% covered · 26 gaps If you hold Australian Privacy Principles (APPs)47.5% covered · 31 gaps

Each report names every control your existing framework evidences, every one it does not, the reasoning behind each claim, and the claims that were argued against and rejected. 0 were rejected on the GDPR pair alone.

See the released pairs, $299 each Browse the graph free