Data Protection
Binding Corporate Rules
Internal policies for international data transfers within corporate groups.
Definition
Personal data protection policies adhered to by a controller or processor established in the EU for transfers of personal data within a group of undertakings to third countries.
Sources
- •GDPR Article 4(20)
- •GDPR Article 47
Related Terms
Binding Common Rules (BCRs)
Approved intra‑group binding rules for international transfers....
Cross-Border Processing
Data processing spanning multiple EU Member States....
Group of Undertakings
Parent company and its subsidiaries....
Data processor
Entity that processes personal data on behalf of a controller....
Data controller
Entity that determines purposes and means of processing....