Binding Corporate Rules
Binding Corporate Rules (BCRs) are policies that groups of companies implement to protect personal data transferred to group entities outside the EU.
BCRs are legally binding on every member concerned within the group and their staff, and they grant rights to individuals whose personal data is transferred outside the EU. Groups of companies must submit BCRs for approval to their competent DPA. DPAs cooperate in the assessment of BCRs and the EDPB adopts consistency opinions on the draft approval decision prepared by the competent DPA. Once the BCR has been finalised in accordance with the EDPB opinion, the competent DPA approves the BCR.
Guidance
Recommendations 1/2022 on the Application for Approval and on the elements and principles to be found in Controller Binding Corporate Rules (Art. 47 GDPR)
Recommendation
#Binding Corporate Rules
#Tools for transfers and derogations
Read more about
Recommendations 1/2022 on the Application for Approval and on the elements and principles to be found in Controller Binding Corporate Rules (Art. 47 GDPR)
Information note on BCRs for Groups of undertakings / enterprises which have ICO as BCR Lead SA
Other guidance
#Binding Corporate Rules
#Tools for transfers and derogations
Read more about
Information note on BCRs for Groups of undertakings / enterprises which have ICO as BCR Lead SA
Compliance instruments
Opinion 17/2026 on the draft decision of the Dutch Supervisory Authority regarding the Processor Binding Corporate Rules of the Infor Group
Opinion of the Board (Art. 64)
#Binding Corporate Rules
#Tools for transfers and derogations
Read more about
Opinion 17/2026 on the draft decision of the Dutch Supervisory Authority regarding the Processor Binding Corporate Rules of the Infor Group
Opinion 16/2026 on the draft decision of the Dutch Supervisory Authority regarding the Controller Binding Corporate Rules of the Infor Group
Opinion of the Board (Art. 64)
#Binding Corporate Rules
#Tools for transfers and derogations
Read more about
Opinion 16/2026 on the draft decision of the Dutch Supervisory Authority regarding the Controller Binding Corporate Rules of the Infor Group
Internal procedure
EDPB Document Setting Forth a Co-Operation procedure for the approval of Binding Corporate Rules for controllers and processors
Procedure
#Binding Corporate Rules
#Tools for transfers and derogations
Read more about
EDPB Document Setting Forth a Co-Operation procedure for the approval of Binding Corporate Rules for controllers and processors