The Global Privacy Assembly (GPA), consisting of 130 Data Protection Authorities globally, has agreed on core data protection elements for trusted data flows. The resolution, adopted at the 46th GPA in Jersey in October(1) makes recommendations that “create a good basis for a further convergence of legal frameworks and transfer instruments such as standard contractual clauses or certification for secure and trustworthy data transfers”.

A panel discussing data transfer tools, headed by IAPP’s Research Director Joe Jones discussed recent developments. Clarisse Girot, Acting Head at the division of data flows, governance and privacy at the OECD, said that DFFT, data free flow with trust, can sound a bit cryptic for those who have not worked in privacy, but it literally means all parties coming together – a perspective to gather insights from industry, regulators, NGOs etc, to make suggestions on how we could do things better. The OECD is now trying to operationalise this in response to a request by the G7.