G7 Data Protection and Privacy Authorities’ Communiqué

Championing privacy in a digital age: Collective action today for a trusted tomorrow

June 19, 2025

---

Introduction

1. We, the G7 Data Protection and Privacy Authorities (DPAs)^{Footnote 1} convened on June 18 and 19, 2025, for a Roundtable meeting hosted by the Office of the Privacy Commissioner of Canada (OPC), in the National Capital Region of Canada. In this fifth Roundtable, we reaffirmed our shared commitment to fostering trust in the digital economy and in supporting innovation that respects privacy and data protection.
2. Meeting under the theme of Championing privacy in a digital age: Collective action today for a trusted tomorrow, we engaged in discussions on the evolving data protection and privacy landscape, the implications of emerging technologies and the importance of cooperation among DPAs of like-minded countries to safeguard the data protection and privacy rights of individuals across jurisdictions.
3. Our exchanges were enriched by discussions with distinguished, Canadian leading experts, who provided insights on the opportunities and challenges that artificial intelligence and quantum computing present to the protection of data and privacy.
4. With the participation of the International Network for Digital Regulation Cooperation (INDRC) and the OECD Division for Data Flows, Governance, and Privacy, we engaged on matters of cross-regulatory collaboration.
5. We were also pleased to welcome representatives of the Personal Information Protection Commission (PIPC) of Korea, on behalf of the Executive Committee of the Global Privacy Assembly (GPA), and the Personal Data Protection Commission (PDPC) of Singapore, on behalf of the Governance Committee of the Asia Pacific Privacy Authorities (APPA) Forum, to discuss enhanced cooperation among international networks of data protection and privacy regulators.
6. In alignment with our shared dedication to safeguarding privacy and data protection while also supporting responsible innovation, we adopted a statement titled Promoting Responsible Innovation and Protecting Children by Prioritizing Privacy. The statement affirms that prioritizing privacy in the design, development and deployment of new technologies is a driver of economic success and societal growth, as it plays a central role in supporting innovation and protecting children online.
7. We welcomed the 2025 Leaders of the G7 Statement on AI for Prosperity, which articulates a shared vision recognizing “the potential of a human-centric approach to artificial intelligence (AI) to grow prosperity, benefit societies and address pressing global challenges.” In their Statement, the G7 Leaders commit to “(w)ork together to accelerate adoption of AI in the public sector to enhance the quality of public services for both citizens and businesses and increase government efficiency while respecting human rights and privacy, as well as promoting transparency, fairness, and accountability.” They also commit to “(p)romote economic prosperity by supporting [small and medium enterprises] to adopt and develop AI that respects personal data and intellectual property rights, and strengthen their readiness, efficiency, productivity and competitiveness.”
8. We also welcomed the G7 Leaders’ indication that they “reiterate the importance of operationalizing Data Free Flow with Trust (DFFT) through trustworthy, cross-border data flows, and affirm its value in enabling trusted AI development and use.” We look forward to continued engagement and offer our support to the Leaders of the G7 and to G7 Industry, Technology, and Digital Ministers on matters where our expertise can help achieve shared objectives including respect for privacy and the protection of personal data as well as operationalizing the concept of DFFT.
9. We also took note of the 2025 Leaders of the G7 Common Vision for the Future of Quantum Technologies. We welcomed the commitment to “(p)romote trust in quantum technologies through public and international dialogues, based on scientific expertise and aligned with democratic values, freedom and fundamental rights, recognizing that, at this early stage of innovation, a global regulatory framework is not yet appropriate.”

Ongoing work of the G7 DPA Roundtable

10. The G7 DPA Roundtable continues to advance its priorities through its three dedicated Working Groups.
11. The Data Free Flow with Trust (DFFT) Working Group, co-chaired by the UK Information Commissioner’s Office (ICO) and the German Federal Commissioner for Data Protection and Freedom of Information of Germany (BfDI), continues in its commitment to work towards commonalities, complementarities and elements of convergence between existing regulatory approaches and instruments enabling cross border data flows to foster their future interoperability through:
    1. Exploring practical steps to operationalize DFFT in a global context to contribute to a deeper understanding of the concept of DFFT and its application.
    2. Building on the 2024 GPA Resolution on Data Free Flow with Trust and an effective regulation of global data flows, the 2021 GPA Resolution on Government Access to Data, Privacy and the Rule of Law: Principles for Governmental Access to Personal Data held by the Private Sector for National Security and Public Safety Purposes and comparative work on model contractual clauses across a range of different data protection frameworks.
    3. Supporting the promotion of the OECD Declaration on Government Access to Personal Data Held by Private Sector Entities, including by encouraging non-OECD members to refer and reflect its principles in their own policy making.
12. The Emerging Technologies Working Group, chaired by the ICO, seeks to promote the development and use of new and existing technologies in ways that reinforce data protection, privacy, and public trust. The group is engaged in work on three key topics:
    1. Connected home devices, including the benefits as well as important concerns with the use of these technologies and emphasizing principles for responsible data practices.
    2. Leading practices for assessing third-party technology providers, including ensuring strong privacy protection when organizations use or implement emerging technologies supplied by a third party.
    3. Knowledge sharing and capacity building on respective approaches to AI, including exploring emerging issues, such as agentic AI.
13. The Enforcement Cooperation Working Group, co-chaired by the Personal Information Protection Commission (PPC) of Japan and the United States Federal Trade Commission (FTC), continues to facilitate dialogue on shared enforcement priorities, including through:
    1. Establishing an enforcement case sharing format that enables G7 DPAs to identify common strategic issues, problems and reasonable solutions that need to be addressed by sharing of appropriate information related to prospective or ongoing investigations, enforcement outcomes and best practices among G7 DPAs.
    2. Building on the narrative adopted in 2024 titled Promoting Enforcement Cooperation and working on a project detailing existing practices that support multilateral enforcement cooperation amongst the G7 DPAs.
14. The working groups aim to complete these items for adoption during a virtual gathering of the G7 DPA Roundtable to take place in December 2025.

Looking ahead

15. We encourage stakeholders, including developers and innovators to reflect on the statement Promoting Responsible Innovation and Protecting Children by Prioritizing Privacy, and to adopt privacy-preserving approaches in the design, development and deployment of all technologies; the processing of personal data should be designed to serve humankind.
16. We remain committed to engaging with experts and partner networks – including the OECD, INDRC, GPA, APPA and others – and express our appreciation for the continued collaboration within the privacy and data protection community and throughout the digital regulatory space to foster a trusted digital environment for all.
17. Drawing on the outcomes of these meetings, the ongoing efforts of our three working groups, and the privacy and data protection discussions taking place throughout the year in this and other fora, we will reconvene virtually in December 2025 to share further reflections and continue our collaboration.
18. We will continue to engage in discussions at expert level and preparing the Roundtable meeting under the chairpersonship of the CNIL, France, in 2026.
19. We, the G7 DPAs, reaffirm our shared commitment to fostering trust and supporting innovation. The collective actions that we take today will contribute to shaping a safer digital environment for the future.