Publications by Category

• Cross-Border Data Flows and International Regulation

• Governance

• Health

• Identity Management

• Privacy by Design

• Privacy Impact Assessments, Audits and Investigation Reports

• Privacy Policies and Notices

• Regulation and Reform

• Security and Privacy

• Technology and Privacy

• Trust

• Other Topics

• Archive

Cross-Border Data Flows and International Regulation

• "Welcome developments in data protection, but are they enough?", blog post prepared by Malcolm Crompton on behalf of the Centre for Information Policy Leadership (CIPL), 20 September 2021.

• "Global scan of privacy regulation of digital platforms", report prepared for the OAIC as part of a set of research papers commissioned in the lead up to the Australian Government’s review of the Privacy Act 1988, June 2020.

• "APEC privacy framework and CBPRs: Ready for the Spotlight", co-presented by Annelies Moens at the IAPP Privacy.Security.Risk.2016, San Jose, 16 September 2016.

• "Potential benefits for APEC economies and businesses joining the CBPR system", presented by Annelies Moens at the Asia Pacific Privacy Authorities, Singapore, 22 July 2016.

• "Potential benefits for APEC economies and businesses joining the CBPR system", presented by Annelies Moens at the APEC and CIPL Workshop, Singapore, 18 July 2016.

• "Preliminary assessment: Potential benefits for APEC economies and businesses joining the CBPR System", report prepared for APEC and presented by Annelies Moens to the Data Privacy Subgroup of the APEC Electronic Commerce Steering Group, Document No 2016/SOM1/ECSG/DPS/027, Lima, Peru, February 2016.

• "Best practice in cross-border data flows", presented by Annelies Moens at the APEC Harmonisation of Standards Project Workshop, hosted by Standards Australia, Sydney, 4 November 2015.

• "Cross border privacy rules", presented by Annelies Moens at the ALB Data Protection Conference, Kuala Lumpur, 7 May 2015.

• "Success through stewardship - Best practice in cross border data flows", report prepared by IIS and funded by NCAPEC, January 2015.

• "Report for APEC: Australia – Phase 1 – CBPR – Impediment Analysis", prepared for APEC and presented to the Data Privacy Subgroup of the APEC Electronic Commerce Steering Group, Document No 2014/SOM3/ECSG/DPS/004, Beijing, August 2014.

• "East meets West: striving to interoperable frameworks?", Data Protection Law & Policy, Vol. 11, No. 5, May 2014, Cecile Park Publishing, London.

• "Interoperability effort between APEC CBPR and EU BCR", presented by Malcolm Crompton at the Asia Internet Coalition Japan (AICJ) hosted by Google Japan, Tokyo, 17 April 2014.

• "Towards a Truly Global Framework for Personal Information Transfers", report prepared by IIS comparing the APEC Cross Border Rule System (CBPR) with the EU Binding Corporate Rule system (BCR), first presented by Malcolm Crompton at the European Congress 2012 convened by the International Association of Privacy Professionals (IAPP), Brussels, 12 December 2013.

• "Notes for remarks by Malcolm Crompton", presented at the Roundtable to mark 30th Anniversary of the OECD Privacy Guidelines convened by the Organisation for Economic Cooperation and Development, OECD; Paris, 10 March 2010.

• "Trust, Transparency & data Governance: Challenges in the APEC privacy framework & the EU directive" (and abstract), presented by Malcolm Crompton at the Workshop on International data sharing & Biometric identification: Ethical Issues in an Asian & International Context, convened by HIDE, a Seventh Framework Programme project funded by the European Commission and others; Singapore, 2 July 2009.

• "The Australian Dodo Case: an insight for data protection regulation", World Data Protection Report, January 2009, Vol. 9, No. 1, BNA International Inc., London.

• "Two approaches to Cross Border data flows", background paper prepared for Meeting privacy challenges – the ALRC & NSWLRC Privacy Reviews, Seminar, Faculty of Law, Panel Session 4: "How well do the ALRC/NSWLRC proposals contribute to meeting international standards for cross-border data transfers?", University of New South Wales, Sydney, 2 October 2008.

• "APEC & Privacy: why bother; what's happening in 2007", presented by Malcolm Crompton at Audio Conference hosted by the International Association of Privacy Professionals (IAPP), York, Maine, 23 August 2007.

• "Report of First Technical Seminar on International Implementation of the APEC Privacy Framework" and "Report of Second Technical Seminar", prepared by IIS for the Australian Government Attorney-General's Department and the APEC secretariat, Document Nos 2007/SOM1/ECSG/DPS/005 & 2007/SOM3/ECSG/DPS/013. IIS was engaged to design and facilitate workshops in Canberra on 24-25 January and Cairns on 27 June 2007 aimed at developing and implementing Cross Border Privacy Rules for the APEC region. This included developing three regulatory model options for discussion to cover cross-border data flows in the APEC region.

• "The APEC Privacy Framework: Creating Trust in developing Cross Border Privacy Rules: A Progress Report", prepared by Malcolm Crompton for the Privacy Summit 2007, International Association of Privacy Professionals, Washington, D.C., 8 March 2007.

• "APEC Privacy Framework: review, impact and progress", presented by Malcolm Crompton at the Conference on International Transfers of Personal Data organised jointly by the Article 29 Data Protection Working Party (Article 29 WP), the independent EU Advisory Body on Data Protection and Privacy, and the US Department of Commerce's International Trade Administration, Brussels, 24 October 2006.

• "APEC Information Privacy Framework (review, impact, and progress)", presented by Malcolm Crompton at the APEC Symposium on Information Privacy Protection in E-Government and E-Commerce, Hanoi, 20 February 2006.

• "Final Report of the 2nd Technical Seminar on APEC Privacy Framework", presented at the Electronic Commerce Steering Group II, Document No 2005/SOM3/ECSG/021, Gyeongju, Korea, September 2005.

• "The Nature of Modern Information Management & Its Impact on Privacy Protection", presented by Malcolm Crompton at the APEC Symposium On Data Privacy Implementation Mechanisms: Developing The APEC Privacy Framework, Document No 2004/SOM1/ECSG/SYM/005, Santiago, Chile, February 2004.