Binding Corporate Rules
What is Binding Corporate Rules?
Internal policies adopted by multinational corporations for transferring personal data within the group across international borders in compliance with data protection laws.
Terms that appear alongside binding corporate rules
Each of these is named in at least one of the same controls as binding corporate rules. The number is how many controls name both.
- standard contractual clauses 35 shared controls
- consent 34 shared controls
- gdpr 23 shared controls
- certification 21 shared controls
- data subject 19 shared controls
- impact assessment 17 shared controls
- schrems ii 17 shared controls
- transfer impact assessment 16 shared controls
Frameworks that govern binding corporate rules
What the standards actually require on binding corporate rules
Requirements naming binding corporate rules across 6 standards, quoted from the control text.
Controllers or processors may submit binding corporate rules to the Authority, which authorises them only if they are legally binding, give data subjects enforceable rights and meet the Act's conditions: binding on the controller and the group companies receiv...
ley-org-nica-de-protecci-n-de-datos-personales-lopdp::58 · Art. 58 and RGLOPDP Arts. 75 and 76: binding corporate rules →Binding corporate rules must be approved by the competent supervisory authority under the consistency mechanism, must be legally binding on and enforced by every member of the group including its employees, and must expressly confer enforceable rights on data...
GDPR-Art.47 · Binding corporate rules →Standard 8 per Section 27 + the Schedule of the Jamaica Data Protection Act 2020: Personal data shall not be transferred outside Jamaica unless adequate protection is provided.
JM-DPA2020-Standard8-Transfers-Outside-Jamaica-Sec27-Adequacy-Decisions-Standard-Contractual-Clauses-BCR-Derogations · Jamaica DPA 2020 Standard 8 - Transfers Outside Jamaica + Section 27 + Adequacy Decisions + Standard Contractual Clauses + Binding Corporate Rules + Derogations + Cross-Border Data Flows + Caribbean Community + International Data Privacy →Binding corporate rules must be approved by the Agency and be legally binding on and enforced by every relevant group member and employee, confer enforceable rights on data subjects, and contain at least the group structure, the transfers and destinations, the...
montenegro-law-on-personal-data-protection-2026::48 · Article 48: binding corporate rules approved by the Agency →The Commissioner approves binding corporate rules that are legally binding on every member of the group, including employees, confer enforceable rights on data subjects and specify at least the group structure, the transfers, their binding nature, the applicat...
uk-gdpr-uk-general-data-protection-regulation::Art.47 · Article 47 Binding corporate rules →Transfers and transmissions within corporate groups may rely on binding corporate rules (normas corporativas vinculantes) authorized by the SIC.
CO-L1581-A27 · Binding Corporate Rules →Questions people ask about binding corporate rules
What is Binding Corporate Rules?
Why is Binding Corporate Rules important for compliance?
Which compliance frameworks address Binding Corporate Rules?
Where can I learn more about Binding Corporate Rules?
See how Binding Corporate Rules applies across compliance frameworks
Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.