Topic

Binding Corporate Rules (BCRs)

Binding Corporate Rules (BCRs) are internal data protection rules that allow multinational corporate groups to transfer personal data from the EEA to group entities in third countries. Approved by the competent EU supervisory authority under the GDPR, BCRs provide appropriate safeguards for international transfers and are legally binding on participating group members. This tag covers BCR approval, requirements, implementation, and their role under the GDPR.

When Can Personal Data Leave the EU? A Practical Guide to GDPR International Transfers

A practical guide to GDPR international data transfers, explaining when personal data may leave the EEA and how adequacy decisions, appropriate safeguards, SCCs, BCRs, Transfer Impact Assessments, and Article 49 derogations enable lawful cross-border transfers.

Controller-to-Processor Transfers: What Article 28 GDPR Requires

A practical guide to Article 28 GDPR requirements for controller-to-processor relationships, covering mandatory contracts, processor due diligence, required terms, sub-processor authorization, liability, security, oversight, and the distinction from international data transfer rules.

Subscribe to The de la Torre Review