GDPR Glossary

What is Binding Corporate Rules?

GDPR Glossary Also known as: BCRs

Approved internal rules that let a multinational group transfer personal data across borders within the group.

Binding Corporate Rules (BCRs) are internal data-protection policies, approved by a supervisory authority, that allow transfers within a corporate group across borders.

They take time to approve but suit large groups moving data internally at scale.

In the Regulation

Art. 47 Binding corporate rulesArt. 46 Transfers subject to appropriate safeguards

Related terms

Standard Contractual ClausesPre-approved contract terms that provide a safeguard for transferring personal data outside the EEA.International data transferSending personal data outside the EEA — allowed only with a valid transfer mechanism.

Need this applied to your business?

Our data-protection lawyers turn GDPR terms into a working plan.

Get advice
All GDPR terms