CBPR Forum updates data protection framework requirements

24/03/2026 | CBPR Forum

The Global Cross-Border Privacy Rules (CBPR) Forum is updating its requirements to enhance data protection for individuals and align standards among members. The certification framework will expand from 50 to 57 requirements, including introducing a responsibility to implement the preventing harm principle. The new provisions increase accountability for processing children's and sensitive data, while mandating risk assessment procedures and breach notification processes.

The updates also strengthen individual choice by requiring companies to record consent and provide mechanisms for its withdrawal when data is no longer necessary. Furthermore, businesses must allow individuals to opt out of direct marketing and maintain records of processing activities, while compliance staff should hold appropriate qualifications.

The updated standards apply from 1 April 2027. Currently certified companies have until their next recertification date after this deadline to review and implement the new procedures. 


Training Announcement: Freevacy offers a range of independent data protection qualifications from IAPP and BCS. Our certified courses are available at foundation and practitioner levels and cover multiple legal jurisdictions, data protection operations management, and the implementation of complex privacy solutions in technical environments. Find out more.

Read Full Story
Data Transfer, globe

What is this page?

You are reading a summary article on the Privacy Newsfeed, a free resource for DPOs and other professionals with privacy or data protection responsibilities helping them stay informed of industry news all in one place. The information here is a brief snippet relating to a single piece of original content or several articles about a common topic or thread. The main contributor is listed in the top left-hand corner, just beneath the article title.

The Privacy Newsfeed monitors over 300 global publications, of which more than 6,250 summary articles have been posted to the online archive dating back to the beginning of 2020. A weekly roundup is available by email every Friday.