Approved Binding Corporate Rules

This register provides a list of valid BCR.

For BCR approved after the entry into application of the GDPR (25 May 2018), a link to the EDPB Opinion and to the national decision of the supervisory authority is provided. 

Please note that this overview list is provided for information purposes only. Companies have a responsibility to inform the competent supervisory authorities of changes to the BCR. The overview list is updated based on information provided by the companies to the competent supervisory authorities. 

For categories of data subjects in the case of BCR-P, the categories of data relate to data processed on behalf of the controllers outside of the group.

Companies relying on BCR for data transfers are obliged to give data subjects easy access to their BCR. For more details about the BCR, please contact the company.