Washington: The National Privacy Commission (NPC) and the Office of the Privacy Commissioner of the Islands of Bermuda (PrivCom) have formalized a memorandum of understanding (MOU) aimed at bolstering cooperation on personal data protection and cross-border enforcement. The signing took place at the Walter E. Washington Convention Center during the International Association of Privacy Professionals (IAPP) Global Privacy Summit 2025.

According to Philippines News Agency, the accord was signed in the presence of NPC Commissioner John Henry Naga and Deputy Privacy Commissioner Nerissa De Jesus, alongside PrivCom Privacy Commissioner Alexander White. Naga emphasized that the agreement facilitates cross-border data transfers essential for economic growth and international collaboration.

Naga highlighted the importance of this partnership, especially given the significant Filipino community in Bermuda's workforce, ensuring their personal data is protected to the same standards as in the Philippines. He stated that the MOU enables more effective responses to cross-border privacy complaints, coordination of investigations, and support for Filipinos in Bermuda, reinforcing that their data rights are upheld globally.

The MOU details collaboration areas between NPC and PrivCom, including exchanging information on potential or ongoing investigations related to data privacy law violations and mutual assistance in such investigations within their jurisdictions. Both parties have committed to coordinating and supporting joint investigations involving cross-border personal data incidents or breaches.

Furthermore, the agreement includes assistance in enforcing decisions and resolutions regarding data protection within each party's jurisdiction. It also sets the stage for developing compatible mechanisms to facilitate trusted cross-border data flows, including mutual recognition of protection measures or national trust marks and privacy certification frameworks.

The partnership extends to knowledge-sharing initiatives such as joint training, education programs, and exchanges on emerging privacy trends. Additionally, both parties may identify organizations to participate in cross-jurisdictional sandbox environments to test innovative data-sharing cases.