According to the GDPR, what is a description of binding corporate rules (BCR)?

The correct answer is B. A set of approved rules on personal data protection used by a group of enterprises. A decision on the safety of transferring personal data to a non-EEA country. Incorrect. This refers to adequacy decisions. A measure to compensate for the lack of personal data protection in a third country. Incorrect. This refers to appropriate safeguards. A set of agreements…

International data transfers

Question

Options

AA decision on the safety of transferring personal data to a non-EEA country
BA set of approved rules on personal data protection used by a group of enterprises
CA measure to compensate for the lack of personal data protection in a third country
DA set of agreements covering personal data transfers between non-EEA countries

How the community answered

(38 responses)

A
3% (1)
B
95% (36)
D
3% (1)

Explanation

A decision on the safety of transferring personal data to a non-EEA country. Incorrect. This refers to adequacy decisions. A measure to compensate for the lack of personal data protection in a third country. Incorrect. This refers to appropriate safeguards. A set of agreements covering personal data transfers between non-EEA countries. Incorrect. The GDPR does not cover agreements between non-EEA countries. A set of approved rules on personal data protection used by a group of enterprises. Correct. BCR are a set of rules approved by the supervisory authorities. (Literature: A, Chapter 3; GDPR Article 47)

Topics

#binding corporate rules#BCR#international transfers#multinational groups

Community Discussion

No community discussion yet for this question.

Full PDPF Practice