Consultation on the implementation of the Global Cross-Border Privacy Rules (CBPR) Forum certifications in Canada

Current status: Closed

The public submission period closed on July 31, 2025.

Canada is a Member of the Global Cross-Border Privacy Rules (CBPR) Forum, a multinational forum that has established the Global CBPR System and the Global Privacy Recognition for Processors (PRP) System, two international privacy certifications that are designed to enable trusted data flows globally.

As a founding Member of the Global Forum, Canada has committed to implementing one or both of the Forum's certifications in the Canadian marketplace. These certifications can help to foster innovation and strengthen competitiveness, while protecting privacy and promoting trust in the digital economy.

Implementing the Global Forum certifications can help strengthen trust and ensure greater transparency, by allowing independent certification bodies to conduct assessments and monitor ongoing compliance by businesses handling Canadians' personal information in the cross-border context.

These certifications would also streamline cross-border data transfers, reducing the compliance burden on businesses and enabling them to operate efficiently across jurisdictions. This would expand market opportunities for Canadian businesses, reducing regulatory barriers and allowing them to compete more effectively in international markets.

Moreover, there is an increasing need to protect personal information in the context of growing cross-border data flows. The Global Forum certifications can help protect personal information when it is transferred across international borders, which is critical in a data-driven global economy.

Implementing the Global Forum certifications would also help strengthen Canada's position in the global digital economy, advancing interoperability with like-minded countries.

This consultation will explore different approaches to implementing the Global Forum certifications in the Canadian marketplace.

Consultation purpose

The Government is seeking feedback on how to shape the implementation model for Global Forum certifications in Canada. In particular, respondents are invited to share their views on the benefits of adopting one or both of the Global Forum certifications, the type of certification body (or bodies) that would best suit Canada's economic and regulatory context, and any additional measures that would make the certifications more useful for individuals, businesses and the Canadian economy. The responses received will shape the implementation process.

Who we are consulting

This consultation seeks comments from organizations regulated by the Personal Information Protection and Electronics Document Act (PIPEDA) or substantially similar legislation, organizations interested in playing a role as a certification body, and any other interested parties who wish to share their views.

Discussion document

The key elements for discussion during this consultation process are outlined in the consultation paper entitled Consultation paper: Consultation on the implementation of the Global Cross-Border Privacy Rules (CBPR) Forum certifications in Canada.

Next steps

Following the consultation period, an update will be published on this web page.

Contact us

If you have any questions or require assistance regarding this consultation, please contact us by email at cbprsconsultation-consultationcbprs@ised-isde.gc.ca.