Binding Corporate Rules

Binding Corporate Rules (BCRs) are policies that groups of companies implement to protect personal data transferred to group entities outside the EU.
BCRs are legally binding on every member concerned within the group and their staff, and they grant rights to individuals whose personal data is transferred outside the EU. Groups of companies must submit BCRs for approval to their competent DPA. DPAs cooperate in the assessment of BCRs and the EDPB adopts consistency opinions on the draft approval decision prepared by the competent DPA. Once the BCR has been finalised in accordance with the EDPB opinion, the competent DPA approves the BCR.

Register of Binding Corporate Rules