Schellman Approved to Provide APEC Certification as an Accountability Agent

June 19, 2019 Schellman & Company


Schellman adds APEC Certification to its suite of compliance services.

Recently, the Asia-Pacific member economies developed a privacy framework as a volunteer system that outlines standards relating to personal information protection as the data moves across borders. Controllers that volunteer within the program are assessed by an Accountability Agent against the Cross-Border Privacy Rules (CBPR) and if compliant, receive a certification. Processors are additionally assessed against the Privacy Recognition for Processors (PRP), and would also receive a certification if compliant with the program. Schellman & Company is now able to assist organizations in achieving both.

Debbie Zaller, the firm’s Privacy Practice Leader stated, “This is an incredible honor for Schellman to be recognized as an Accountability Agent. The privacy framework is comprehensive yet attainable for organizations to meet. It also incorporates elements from other privacy frameworks including the GDPR, which makes this certification ideal for multi-national organizations.”

Schellman’s new APEC CBPR Privacy Certification program evaluates a United States-based organization that serves as a controller that collects personal information and transfers information between the participating economies in the APEC region. The firm’s APEC PRP Certification program assesses a United States-based organization that serves in the role of processor, handling personal information on behalf of a controller and assisting the controller in complying with the relevant privacy requirements. The organization is evaluated against either the CBPR or PRP certification minimum requirements, and should processors achieve this certification, they are then more visible to controllers looking for a certified processor or vendor. Certification standards are defined on Schellman’s website, but also follow the APEC’s Program Requirements. Avani Desai, Schellman’s President, states, “Adding APEC to our services was a natural addition as we continue to provide our clients end-to-end security, privacy, and compliance assessment services.”

Inquiries for APEC services can be made with Schellman at 1-866-254-0000 or by submitting a request for a professional consultation at

About the Author

Schellman & Company

Schellman & Company, LLC (Schellman) is a leading provider of attestation and compliance services. We are the only company in the world that is a CPA firm, a globally licensed PCI Qualified Security Assessor, an ISO Certification Body, HITRUST CSF Assessor, a FedRAMP 3PAO, and most recently, an APEC Accountability Agent. Renowned for expertise tempered by practical experience, Schellman's professionals provide superior client service balanced by steadfast independence. Our approach builds successful, long-term relationships and allows our clients to achieve multiple compliance objectives through a single third-party assessor.

More Content by Schellman & Company
Previous Flipbook
APEC Certification Overview
APEC Certification Overview

Next Article
Key Observations since GDPR Enforcement
Key Observations since GDPR Enforcement

Giant strides have been made in privacy rights and regulations in Europe and many parts of the g...

Schellman can help you prepare for upcoming international laws by reviewing your privacy program