According to the General Data Protection Regulation (GDPR) which covers the concept "Compulsory Corporate Rules"?

Question

Options

• Ato advise the controller in accordance with the prior consultation procedure referred to in Article
• BContractual clauses to transfer data to a country that does not have a data protection law.
• CA set of rules used by a group of companies regarding the protection of personal data in
• DRules covering data transfers between several countries.

• A
  6% (2)
• C
  91% (29)
• D
  3% (1)

Explanation

Compulsory Corporate Rules are rules used internally by multinational companies to transfer personal data. Thus, it is possible to transfer data between them, even if the destination company is in a country that does not have an adequate level of data protection. These rules are like an internal corporate code of conduct and do not cover transfers of personal data outside the corporate group. Do not confuse "Compulsory Corporate Rules" with "Standard Contractual Clauses". The last are clauses in contracts for international data transfer between companies (customer and supplier relationship) where the destination country does not have an adequate level of data protection, and depends on authorization from the Supervisory Authority. Article 58 of GDPR 3. supervisory authority shall have all of the following authorisation and advisory powers:

No community discussion yet for this question.