Symposium on Trustmark Guidelines in CBPR System

Transcription

1 2011/SOM3/ECSG/005 Agenda Item: VII2a Symposium on Trustmark Guidelines in CBPR System Purpose: Consideration Submitted by: Viet Nam 24 th Electronic Commerce Steering Group Meeting San Francisco, United States 21 September 2011

2 APEC Concept Note Please submit through APEC Secretariat Program Director. Concept notes of more than 3 pages (including title page) or incomplete submissions will not be considered. Project Title: Symposium on Trustmark Guidelines in CBPR system Source of funds (Select one): x Operational Account TILF Special Account APEC Support Fund Committee / WG / Sub-fora / Task-force: Proposing APEC economy: ECSG Data Privacy Subgroup Vietnam Co-sponsoring economies: United States, Australia and Japan Expected start date: April 2012 Expected completion date: November 2012 Project summary: Describe the project in under 150 words. Your summary should include the project topic, planned activities, timing and location: (Summary must be no longer than the box provided. Cover sheet must fit on one page) The purpose of this project is to promote experience sharing in implementing APEC Privacy Framework and APEC Cross Border Privacy Rules (CBPR) system. Also, this project is expected to facilitate information exchange among trustmark organizations to map out Best Pratice for APEC trustmark providers. The project will help to resolve some difficulties/ obstacles at finding a homologous point for all trustmark organizations which develop at different levels. Moreover, this project will be a chance to examine APEC Privacy principles for application to other APEC economies, esp. such like Vietnam. The Symposium will be held at September 2012 in Hanoi, Vietnam. The project will also release a Guidebook on Privacy and Trustmark Practice for local enterprises as an important publication for reference. Total cost of proposal: (APEC funding + self-funding) USD 102,730US$ Total amount being sought from APEC (USD): 67,821 US$ By category: Travel: 40,671US$ Labour costs: 10,150US$ Hosting: 7,000US$ Publication and distribution: $10,000 Project Proponent Information and Declaration: Name: Bui Thi Thanh Hang Title: Deputy Director, Vietnam E-commerce Development Center Organization: Vietnam E-commerce and It Agency, Ministry of Industry and Trade Postal address: R. 411, 25 Ngo Quyen Str., Hanoi, Vietnam

3 Tel: Fax: I declare that this submission has been prepared in line with the Guidebook on APEC Projects. If approved, I agree to develop the project in line with APEC project requirements. (signed) Thanh Hang Bui Thi Date: May 2011

4 Project Synopsis 1. Relevance: Why should APEC undertake this project? What problem or opportunity will the project address and why is it important? This project seeks to facilitate participation in the APEC Cross Border Privacy Rules (CBPR) system, by member economies through the provision of technical assistance on key aspects of this system as developed in the APEC Data Privacy Pathfinder (esp. Project 2). These aspects include issues related to development and governance of trustmark in a CBPR system in terms of recognition of accountability agents. The APEC Data Privacy Pathfinder, endorsed by APEC Ministers in 2007, aims to gain commitments by economies to work together to develop a system that provides for accountable cross-border data flows of personal information of consumers while enabling businesses to take advantage of the benefits and efficiencies of electronic commerce. The Pathfinder sets out a series of objectives that can be achieved on a voluntary basis by APEC economies. The Data Privacy Pathfinder Work Plan expands upon these objectives by developing a series of projects designed to build a system that 1) allows businesses to create their own cross-border privacy rules (CBPRs) based on the APEC Privacy Framework, and 2) provides a mechanism so that consumers can rely upon accountability agents as well as regulators to ensure that businesses are held liable to their privacy promises. Currently, there are 16 APEC economies participating in the Pathfinder, albeit at different levels that range from observer status to implementation of all nine Pathfinder projects. 2. Objectives: Describe the 2-3 key objectives of the project. (e.g. to... create a framework...; ensure participants will be able to...; share experiences...; enhance understanding...; develop recommendations...; build interest...; revise strategies... etc.) By the end of the training/symposium, participants will be able to: i) Develop guidelines for what a trustmark organization must do in order to be recognized as an APEC CBPR accreditation provider; ii) Increase the awareness of APEC Privacy Principles and trans - border privacy issues iii) Facilitate information sharing on experiences, latest practices and approaches to domestic and international implementation efforts related to the APEC Privacy Framework. 3. Alignment: Describe how the project will help achieve APEC s key priorities and meet your forum s work-plan or medium-term plan. At the November th Ministerial Meeting and 12th APEC Economic Leaders Meeting in Santiago, Chile, APEC Ministers and Leaders reinforced ongoing work on the APEC Privacy Framework to promote free and open trade and investment in the Asia-Pacific region. Ministers endorsed the APEC Privacy Framework and the Future Work Agenda on International Implementation of the APEC Privacy Framework. In Sydney in September 2007 APEC Ministers endorsed the APEC Data Privacy Pathfinder, which provides a process for the international implementation of the APEC Privacy Framework. This project is designed to facilitate participation in CBPR system and APEC Data Pathfinder Projects Implementation Work Plan (2009). In addition, this project is expected to contribute to successful implementation of CBRP system which will start in It also addresses priorities of APEC ECSG work plan, including facilitation of domestic implementation of the APEC Privacy Framework. 4. Methodology: How do you plan to implement the project? In this section, address: Timeline: Project timelines and dates for key activities and deliverables Stakeholders: Beneficiaries and stakeholders (APEC & non-apec) and how they will be engaged Previous projects/activities: If and how this proposal builds on the findings or lessons learned from previous projects/activities, while avoiding duplication Communication: How you plan to communicate the results or benefits of this project to others

5 a) Implementation: Develop draft agenda and circulate to ECSG for comment and input. Identify speakers and vet with ECSG. Circulate invitation and encourage travel eligible economies to take advantage of funding to send data privacy officials Organize administrative aspects and workshop logistics. September 2012: Conduct one-day symposium in Hanoi, Vietnam Compile and disseminate feedback of symposium materials and results. Distribute symposium materials for use by all participants and APEC members. Distribute APEC Guidebook on Privacy and Trustmark Practice to APEC members and local enterprises. b) Member Economies and Beneficiaries: i. Developing APEC member economies, including: Government officials and policy makers responsible for development and implementation of cross-border privacy rules (CBPRs); Regulatory agencies and/or appropriate private sector accountability agents (e.g., privacy trust marks) responsible for enforcement of CBPRs; and Business organizations responsible for protecting customer data and information. ii. Developed APEC member economies, including: Government officials and policy makers responsible for development and implementation of cross-border privacy rules (CBPRs); Regulatory agencies and/or appropriate private sector accountability agents (e.g., privacy trust marks) responsible for enforcement of CBPRs; and Business organizations responsible for protecting customer data and information. As stated in Part 2, this project has three key objectives in which the objective (i) will directly feed into APEC Data Privacy Pathfinder Project 2. Thanks to the symposium, a set of guidelines for trustmark providers in compliance with APEC Privacy Framework can be updated with better fitting with member economies, esp. for developing economies like Vietnam. Importantly, the symposium will help to promote privacy protection throughout organizations using trustmarks within the APEC region.

6 10/7/2011 Symposium on TRUSTMARK GUIDELINES IN CBPR SYSTEM Economy: Vietnam Organization: Vietnam E commerce and IT Agency (VECITA) Ministry of Industry and Trade RELEVANCE APEC CBPR system APEC Data Privacy Pathfinder Project 2 (APEC Data Privacy Pathfinder Projects) 1

7 10/7/2011 OBJECTIVES Develop guidelines for what a trust mark organization must do in order to be recognized as an APEC CBPR accreditation provider Increase awareness of APEC Privacy Principles and trans border privacy issues Facilitate t information sharing on experiences, latest t practices and approaches to domestic and international implementation efforts related to APEC Privacy Framework ALIGNMENT Facilitate participation in CBPR system and APEC Data Privacy Pathfinder Project Implementation Work Plan (2009) Contribute to successful implementation of CBPR system which will start in 2012 Address priorities of APEC ECSG work plan, including assistance of domestic implementation of APEC Privacy Framework 2

8 10/7/2011 METHODOLOGY (Timeline) Q1/2012: Develop draft agenda and circulate to ECSG for comment and input Q2/2012: Identify speakers and vet with ECSG Organize administrative aspects and workshop logistics Q3/2012: Circulate invitation and encourage travel eligible economies to take advantage of funding to send data privacy officials September 2012: Conduct one day symposium in Hanoi, Vietnam Compile and disseminate feedback of symposium materials and results. October and November 2012: Distribute symposium materials for use by all participants and APEC members. Distribute APEC Guidebook on Privacy and Trustmark Practice to APEC members and local enterprises. METHODOLOGY (Stakeholders) Developing APEC member economies: Government officials and policy makers responsible for development and implementation of cross border privacy rules (CBPRs); Regulatory agencies and/or appropriate private sector accountability agents (e.g., privacy trust marks) responsible for enforcement of CBPRs; and Business organizations responsible for protecting customer data and information Raise awareness of consumers on privacy issues and roles of trust mark 3

9 10/7/2011 Developed APEC member economies: Government officials and policy makers responsible for development and implementation of cross border privacy rules (CBPRs); Regulatory agencies and/or appropriate private sector accountability agents (e.g., privacy trust marks) responsible for enforcement of CBPRs; and Business organizations responsible for protecting customer data and information. SUMMARY Promote experience sharing in implementing APEC Privacy Framework and APEC CBPR system Facilitate information exchange among trust mark providers 4

10 10/7/2011 THANK YOU Contact / vn 5