Program

While different economies have different personal data protection systems, taking common and consistent measures in response to personal data breaches worldwide has become necessary. In particular, if personal data is breached in an economy without a personal data protection system, more efforts need to be made to minimize damage.

Trust in data management is important for the sustainable development of the digital economy. The APEC Privacy Framework 2015 promoted the necessity of security safeguards against the risk of data breach in Principle 7 (Security Safeguards).

This project will supplement the previous APEC initiative and reinforce the competencies of member economies so that the Asia-Pacific economy can use personal data safely and fairly at home and abroad. As a result, APEC economies are expected to provide users with an environment for safe use of personal data, and therefore contribute to the development of the digital economy.

The objective of this project is to discuss the current situations and policies of APEC member economies in regard to personal data breach notification systems in an effort to globally share responses to personal data breaches in the digital environment. To this end, participants will include policy makers, government officials, legal experts, privacy enforcement authorities, and personal data experts, who are in charge of designing and implementing policies related to the notification of personal data breach.

This project will consist of an online Forum for APEC economies on “Improving Cross-Border Effectiveness of Personal Data Breach Notification Systems.” Through the participation of APEC member economies, the forum will contribute to reinforcing the personal data capacity of its APEC members, as well as improving knowledge of personal data breach notification systems and methods in different economies by doing the following:

Improving understanding of problems related to personal data conflicts in digital trade, including cross-border enforcement issues
Facilitating awareness of personal data breach notification and discussing systems and policies that can prevent secondary damage to users in case of international problems
Strengthening the structure of the digital economy through the sharing of personal data breach notification systems, policies, and processes of solving problems

12:00- 12:10	Opening and Welcome Remarks / Workshop Overview
12:10-12:50	Session 1: Current Status of APEC Economies’ Personal Data Breach and Notification Systems This session will focus on the topic of personal data breach management in application with AI and big data, with a discussion of different personal data breach notification systems by economy. The objective of this session is to provide participants with a better understanding of the legal framework and current situation analysis of the PDBN of APEC economies. Because the current PDBN regulation varies by country, it is important to assess the current status of member states’ PDBN and to examine which method is most appropriate to operate the system. This session will help exchange data protection methods that can aid APEC member economies, corporations, non-profit organizations, NGO’s, and more. Moderator: Joan Therese MEDALLA, the Enforcement Division, National Privacy Commission (Philippines) Singapore’s Data Breach Notification System Chun How BAY, Director of Consumer Services & Investigation, Personal Data Protection Commission of PDPC (Singapore) Personal data in Australia David STEVENS, Assistant Commissioner, Office at the Australian Information Commissioner (Australia) Discussion
12:50-13:10	Intermission
13:10- 13:50	Session 2: Current Status of APEC Economies’ Personal Data Breach and Notification Systems II Moderator: Beomsoo KIM, Dean, Graduate School of Information at Yonsei University (Rep. of Korea) Personal Data Breach Notification in Korea Beomsoo KIM, Dean, Graduate School of Information at Yonsei University (Rep. of Korea) Cross-Border Effectiveness of the Personal Data Breach Notification Julio PERTUZE, Undersecretary of Economy, Ministry of Economy, Development and Tourism (Chile) Discussion
13:50-14:00	Intermission
14:00-14:50	Session 3: Good Practices of Personal Data Breach Notification with APEC Member Economies The objective of this session is to share methods of personal data breach notification with APEC member economies as well as to discuss real cases of these data breach notification systems. Examining the wide range of personal data breach cases and good practices used to respond to these cases can help determine the most effective approaches and methods when considering the evolution of personal data breach notification systems. Through this, we aim to enhance the knowledge among APEC Privacy Enforcement Authorities (PEAs) and facilitate even more effective cross-border enforcement cooperation activities. Moderator: Sinta Dewi ROSADI, Padjadjaran University (Indonesia) Handling Data Breach in Hong Kong Brad KWOK, Senior Personal Data Officer, Privacy Commissioner for Personal Data (Hong Kong) A Tool to Assess Real Risk of Significant Harm from Breaches Sonja HANISCH, Manager, Breach Response Unit, Office of the Privacy Commissioner of Canada (Canada) Gillian KULAR, Senior Investigator, Breach Response Unit, Office of the Privacy Commissioner of Canada (Canada) Promoting Comparability of Personal Data Breach Notification Reporting Suguru IWAYA, Policy Analyst, Science, Technology and Innovation Directorate at the OECD Discussion
14:50- 15:00	Closing Remarks

Improving Cross-Border Effectiveness of Personal Data Breach Notification Systems

Forum Agenda