Global CBPR under GDPR Art. 46(2)(f)

Not an approved certification under Article 42 and not a European transfer tool, although other jurisdictions, Singapore among them, recognise CBPR certification as a transfer basis.

Invalidation trigger

CBPR-based criteria are approved under Article 42 and recognised by the Board as a transfer tool.

Sources

1. [1]Regulation (EU) 2016/679 (GDPR), Art. 42(5) and 46(2)(f) · retrieved 2026-09-17 · https://eur-lex.europa.eu/eli/reg/2016/679/oj
2. [2]EDPB register of certification mechanisms, seals and marks, no CBPR-based criteria among the 17 entries · retrieved 2026-09-17 · https://www.edpb.europa.eu/registers/register-of-consistency-and-of-accountability-tools/certification-mechanisms-and-data_en
3. [3]Personal Data Protection Regulations 2021 (Singapore), reg. 12(2)(b), as amended by S 86/2026 with effect from 2 March 2026 · retrieved 2026-09-17 · https://sso.agc.gov.sg/SL/PDPA2012-S63-2021

Confidence

high

Jurisdiction

European Union · coverage drafting

Permanent URL

/effect/european-union/gdpr-46-2-f/global-cbpr