Global Cross-Border Privacy Rules (Global CBPR) Forum: every control, and what you already have

12 controls 45 frameworks share controls with it International (Global CBPR Forum) verified against its source document

Every control below is one this framework asks for. The right hand column counts how many other frameworks in our corpus carry the same control, which is the difference between doing this work once and doing it again for the next standard.

There is no implementation kit for this framework yet. The control list and the overlap above are free and complete.

What you already have

Frameworks whose controls overlap this one, most first. If you run any of them, the count is roughly what you have already evidenced.

If you run	Shared controls
Bahrain PDPL	2	measure it →
Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (UAE PDPL)	2	measure it →
Family Educational Rights and Privacy Act (FERPA)	2	measure it →
GLI-33	2	measure it →
Privacy Act 1988 (Australia)	2	measure it →
Albania Law on Protection of Personal Data (Law No. 9887, 2008, amended 2014)	1	measure it →
AML/CTF Act 2006 (Australia)	1	measure it →
API 1164	1	measure it →
APPI	1	measure it →
Armenia Law on Protection of Personal Data (2015)	1	measure it →
AS9100D	1	measure it →
Australian Privacy Principles (APPs)	1	measure it →

Every control

Code	Control	Also in
`CBPR-2024-2025-UK-NewJurisdictions-AI-PEP`	Global CBPR Forum: 2024-2025 Update Pipeline - UK 2024, AI Integration, PEP, ASEAN MCC	0
`CBPR-9-APEC-Privacy-Principles`	Global CBPR Forum: 9 APEC Privacy Principles (Notice + Collection + Uses + Choice + Integrity + Security + Access + Accountability + Preventing Harm)	41
`CBPR-AccountabilityAgents-CertificationProcess`	Global CBPR Forum: Accountability Agents (TrustArc, Schellman, BBB, JIPDEC) and Certification Process	10
`CBPR-Coord-GDPR-UK-Japan-Korea-Singapore-Philippines-StateLaws`	Global CBPR Forum: Coordination with GDPR + UK GDPR + Japan APPI + Korea PIPA + Singapore PDPA + Philippines DPA + US State Laws	0
`CBPR-Crosswalk-GDPR-StateLaws-ISO27701-NIST`	Global CBPR Forum: Crosswalk to GDPR, US State Laws, ISO/IEC 27701 and NIST Privacy Framework	0
`CBPR-DisputeResolution-Enforcement-CrossBorderRecognition`	Global CBPR Forum: Dispute Resolution, Enforcement and Cross-Border Recognition	0
`CBPR-Forum-Governance-Membership`	Global CBPR Forum Governance, Membership and Relationship to APEC CBPR	0
`CBPR-Global-PRP-Privacy-Recognition-Processors`	Global CBPR Forum: Global PRP (Privacy Recognition for Processors) Controller-Processor Linkage	0
`CBPR-Implementation-MultiState-AdequacyMechanism`	Global CBPR Forum: US Multi-State Adequacy Mechanism, State-by-State Recognition	0
`CBPR-Implementation-Roadmap-Roles-Org`	Global CBPR Forum: Implementation Roadmap, Organizational Roles and Certification Management	0
`CBPR-IndustryAdoption-MajorCertifiedOrgs-Sectoral`	Global CBPR Forum: Industry Adoption, Major Certified Organizations and Sectoral Application	0
`CBPR-Status-AnnualMeeting-Working-Groups-Future`	Global CBPR Forum: Status, Annual Meeting, Working Groups and Future Roadmap	0

Tell me when Global Cross-Border Privacy Rules (Global CBPR) Forum files something new

One email when a public company newly discloses something this framework governs, naming the company and what our corpus says it puts in scope. Nothing else, and one click to stop.

What an auditor will ask you to produce

The artefacts named on the failure modes this framework speaks to.

Role inventory + RACI
Metrics + management review
Annual cycle documentation
Role inventory + RACI + DPO designation
Operational controls + tooling investment
Reporting process + content index
Pipeline tracking + impact assessment
Pipeline-tracking + implementation plan per rule
SEC Reg S-P readiness 2025-2026
Section 1033 readiness 2026-2030

How programmes fail on this

Failure modes named by this framework and others. Each opens the full record.

Tooling fragmented named by 11 frameworks
Pipeline not tracked named by 8 frameworks
Multi-framework alignment ad-hoc named by 7 frameworks
Metrics gaps named by 6 frameworks
Roadmap not tracked named by 3 frameworks
Annual cycle ad-hoc named by 3 frameworks

What this page is

A control-level reference for Global Cross-Border Privacy Rules (Global CBPR) Forum, drawn from our framework corpus. Control codes and titles are references to the standard, not reproductions of it. The overlap counts and the auditor artefacts are our own work and are the part you will not find elsewhere.

Measure this against what you already run · All frameworks · Today's edition