Go to Opinion 33/2025 on the draft decision of the Irish Supervisory Authority regarding the Processor Binding Corporate Rules of the CSG Group
AXA
- Type of BCR
- Controller
- Categories of data subjects
- Employees
- Contractors
- Clients, customers
- Suppliers
- Suppliers, service providers
EDPBI:LU:OSS:D:2026:4037
EDPBI:LU:OSS:D:2026:4037
- CSA
-
-
at
-
- Main legal reference
- Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject)
- Article 15 (Right of access by the data subject)
- Relevant topics
- Outcome
- Other
Citigroup(Citi)
- Type of BCR
- Controller
- Categories of data subjects
- Employees
- Contractors
- Suppliers
- Suppliers, service providers
BT Group Plc.
- Type of BCR
- Controller
- Categories of data subjects
- Employees
- Contractors
- Clients, customers
- Suppliers
- Suppliers, service providers
EDPBI:MT:OSS:D:2021:212
EDPBI:MT:OSS:D:2021:212
- CSA
-
-
es
-
- Main legal reference
- Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject)
- Article 17 (Right to erasure (‘right to be forgotten’))
- Article 24 (Responsibility of the controller)
- Relevant topics
- Outcome
- Compliance order
- Reprimand
Opinion 22/2023 on the draft decision of the Belgian Supervisory Authority regarding the Controller Binding Corporate Rules for employee data of the UPS Group
Go to
Opinion 22/2023 on the draft decision of the Belgian Supervisory Authority regarding the Controller Binding Corporate Rules for employee data of the UPS Group
Coordinated Enforcement Framework
Go to Coordinated Enforcement Framework
EDPBI:IE:OSS:D:2024:1571
EDPBI:IE:OSS:D:2024:1571
- CSA
-
-
at
-
be
-
bg
-
hr
-
cy
-
cz
-
dk
-
ee
-
fi
-
fr
-
de
-
gr
-
hu
-
it
-
lv
-
lt
-
lu
-
mt
-
nl
-
pl
-
pt
-
ro
-
sk
-
si
-
se
-
no
-
is
-
li
-
- Main legal reference
- Article 5 (Principles relating to processing of personal data)
- Article 6 (Lawfulness of processing)
- Article 7 (Conditions for consent)
- Article 8 (Conditions applicable to child’s consent in relation to information society services)
- Relevant topics
- Outcome
- Amicable settlement
Deutsche Telekom
- Type of BCR
- Controller
- Categories of data subjects
- Employees
- Contractors
- Clients, customers
- Suppliers
- Suppliers, service providers
- Other third parties as part of the Group’s respective regular business activities