Lynda.com and Yodlee are the two latest companies to receive certification that they are in compliance with the Asia-Pacific Economic Cooperation (APEC) Cross Border Privacy Rules following on from IBM and Merck last year. TRUSTe, the first Accountability Agent for APEC’s privacy framework, worked closely with both companies to ensure their data collection practices were in compliance with the CBPR system. TRUSTe will monitor ongoing compliance and deliver consultative services throughout the partnership.
Commenting in a press release today on their APEC Certification, David Glaubke, Director of Corporate Communications at lynda.com, said:
“Lynda.com is committed to protecting the privacy of our users, and the APEC Privacy certification helps protect the exchange of personal information across borders, which is vital to our business. As we continue to grow in different regions throughout the world, we want to continue to build trust with our users, address concerns about privacy and be transparent about our data privacy practices.”
Brian Costello, Vice President, Information Security at Yodlee added:
“The APEC Certification of our privacy data handling is a key factor in our conversations and engagements with potential clients in the member countries.”
This news follows the announcement last Thursday by the FTC, together with agency officials from the European Union and APEC economies, with the ultimate goal of helping businesses transfer data around the world in a safe way in compliance with global privacy frameworks.
The EU-APEC Referential maps together the requirements for APEC Cross Border Privacy Rules (CBPRs) and EU Binding Corporate Rules (BCRs). The document, jointly designed by APEC officials and the EU’s Article 29 Data Protection Working Party, is designed to be a practical reference tool for companies that seek “double certification” under these APEC and EU systems, and shows the substantial overlap between the two.
Chris Babel CEO TRUSTe welcomed the launch of the EU-APEC Referential as an important step towards global inter-operability of data privacy frameworks announcements saying:
“Through our work with Promontory providing BCR solutions and as the Accountability Agent for APEC in the US, we understand the practical challenges that these differing privacy frameworks create for companies looking to act responsibly in their use of customer data. We welcome the announcement made by EU agencies and APEC economies last week which will make it easier for companies to demonstrate global compliance under international standards and is an exciting step towards further interoperability of privacy frameworks worldwide.”
In order to help companies better understand the new EU-APEC Referential, and how they can achieve global privacy compliance via the APEC and BCR Frameworks, TRUSTe is hosting a webinar on March 25 with Josh Harris, Policy Director at the Future of Privacy Forum, Simon McDougall from Promontory and Saira Nayak, Policy Director at TRUSTe.
Register for the webinar here
Find out about the TRUSTe APEC Privacy program here
Find out about the TRUSTe Promontory BCR Management Program here