BCRs must be approved by:

• A.The competent supervisory authority through the consistency mechanism
• B.Any national court
• C.The European Parliament, per Article 46(3), which allows ad hoc contractual clauses to be approved automatically without supervisory authority authorisation
• D.The controller themselves, per Article 33(1), which allows the 72 hour clock to be paused over weekends and public holidays