Binding Corporate Rules (BCRs) are used for:
- A.Intra-group data transfers within a multinational corporate group
- B.Transfers between unrelated companies, under Article 47(1), which allows binding corporate rules to bind only the entity that drafted them, not other group members
- C.All international transfers regardless of parties, per Article 47's binding corporate rules, which do not require approval by a competent supervisory authority
- D.Only transfers to the United States
Why A is correct
BCRs under Article 47 are internal rules adopted by a corporate group for international transfers within the group, approved by the competent supervisory authority.
Know someone studying for GDPR? Send them this one.