Joint guidelines on the ASEAN and RIPD model contractual clauses for international transfers of personal data

ECIJA Ecuador’s TMT, Cybersecurity, Privacy and Personal Data Protection practice has published a new briefing note on the Joint Guidance on the Model Contractual Clauses of ASEAN and the Ibero-American Data Protection Network (RIPD), an instrument designed to facilitate international transfers of personal data and strengthen regulatory compliance in cross-border operations.

The guide serves as a reference tool for organisations that transfer data between different jurisdictions, comparing the contractual models developed by ASEAN and the RIPD, promoting greater interoperability between the two regulatory frameworks and offering practical criteria for the implementation of appropriate data protection mechanisms.

Our briefing note analyses the main differences and similarities between the two models, including the processing of sensitive personal data, protection mechanisms against access by government authorities, the rights of data subjects, and the obligations to be assumed by exporters and importers of personal data in the context of international transfers.

The publication also highlights the importance of adopting contractual clauses that guarantee an adequate level of protection for personal data, particularly for organisations with international operations or those that exchange information with suppliers and customers located in different jurisdictions.

We invite you to read our briefing note to learn about the key aspects of the ASEAN–RIPD Joint Guidelines and the considerations organisations should bear in mind when carrying out international transfers of personal data.