Binding corporate rules
CIPP/E glossary · Last reviewed: · By Victor Humenhuk (CIPP/E certified)
Binding corporate rules - An internal, legally binding and enforceable privacy code allowing a corporate group to transfer personal data between its worldwide entities under a uniform high standard of protection.
In the CIPP/E body of knowledge, Binding corporate rules comes up under Ch 11.7-11.8 - BCRs; Ch 18.4.4 - Processor BCRs; Ch 3.4 - GDPR.
Binding corporate rules in context
- [[Binding corporate rules]] ([[BCR]]s) can support an accountability framework. (Binding corporate rules and conclusion)
- a future Privacy Shield 2.0 under Article 45), the revised modular [[standard contractual clauses]] (Article 46), ad hoc/tailored clauses approved by a DPA (Article 46(3)), and [[binding corporate rules for processors]]. (Offshoring and international transfers)
- [[Binding corporate rules]] (BCRs) are internal, legally binding data protection rules adopted by multinationals. (Binding corporate rules for processors)
Where Binding corporate rules is covered in the CIPP/E study notes
- The General Data Protection Regulation (GDPR)
- Binding corporate rules and conclusion
- Binding corporate rules for processors
- Module 7 · Appropriate safeguards: SCCs, BCRs & codes
Related terms
- GDPR
- Directly applicable
- Monitoring behaviour
- Accountability
- Data protection by design and by default
- Standard contractual clauses
- BCR
- Processor BCRs
- Safe processor
- Standard Contractual Clauses
Test yourself on Binding corporate rules
Recognising a definition is not the same as applying it in an exam scenario. Work through the free CIPP/E practice questions, or read the full CIPP/E study guide - every study note is free.