Global Privacy Assembly Adopts Resolution on Trustworthy International Data Traffic

BfDI Press Releases (Germany DPA)

Published November 1st, 2024

Detected March 17th, 2026

Summary

The Global Privacy Assembly (GPA) adopted a resolution on trustworthy international data traffic, also known as Data Free Flow with Trust (DFFT). Initiated by the German delegation, the resolution provides core data protection elements to guide legal frameworks and transfer instruments for secure data transfers.

View original document View source feed page

What changed

The Global Privacy Assembly (GPA), an international association of data protection authorities, adopted a resolution on "Data Free Flow with Trust" (DFFT) during its conference in Jersey. The resolution, initiated by the German Federal Commissioner for Data Protection and Freedom of Information (BfDI), outlines core data protection elements for international data traffic. These recommendations aim to create a foundation for harmonizing legal frameworks and transfer instruments like standard contractual clauses and certifications for secure data transfers.

This resolution is non-binding but provides guidance for international data protection standards. The GPA also discussed technological topics, including data protection issues related to large language models (AI). Regulated entities, particularly those involved in cross-border data transfers or utilizing AI technologies, should be aware of these emerging international standards and their potential influence on future regulatory developments and compliance obligations.

Source document (simplified)

Jersey, 01 November 2024

Press release 14/2024

Global Privacy Assembly adopts resolution for trustworthy international data traffic

The conference from 28 October to 1 November in Jersey adopted recommendations on trustworthy international data traffic or Data Free Flow with Trust (DFFT).

Source: BfDI

The resolution on DFFT was initiated by the BfDI delegation and prepared together with the European Data Protection Supervisor.

The Federal Commissioner for Data Protection and Freedom of Information (BfDI), Prof. Dr. Louisa Specht-Riemenschneider, participated together with the German delegation in the assembly of international data protection supervisory authorities, the Global Privacy Assembly (GPA), in Jersey.

BfDI Prof. Dr. Specht-Riemenschneider explains: The rules for cross-border data traffic are important for international data protection. The GPA members have now defined the core data protection elements for DFFT. These recommendations create a good basis for a further convergence of legal frameworks and transfer instruments such as standard contractual clauses or certification for secure and trustworthy data transfers.

The resolution on DFFT was prepared jointly with the European Data Protection Supervisor.

In addition to cross-border data traffic, technological topics in particular were on the agenda of this year's conference. Among other things, the BfDI took part in a panel discussion on data protection issues relating to so-called large language models as an artificial intelligence technology and presented the current work of the International Working Group on Data Protection in Technology (IWGDPT or "Berlin Group"), which she chairs. The GPA meets annually, and currently comprises of over 130 members from all over the world. This makes it the largest international association of data protection authorities. Throughout the year, the members of the Assembly discuss globally relevant data protection policy and data protection law issues in expert groups.