BINDING CORPORATE RULES

31 July 2018

• data protection
• GDPR
• general data protection regulation
• Solicitors Liverpool
• GDPR liverpool
• gdpr compliance
• Binding corporate rules
• Article 29 Working Party
• BCR
• WP29
• Processor binding corporate rules
• Article 47 GDPR
• gdpr compliance tools

In order to reflect the requirements of GDPR, the Article 29 Working Party (WP29) has published the following updated guidelines on Binding Corporate Rules (BCRs):

•  Working Document setting up a table with the elements and principles to be found in Binding Corporate Rules (WP 256)
• Working Document setting up a table with the elements and principles to be found in Processor Binding Corporate Rules (WP 257)

The tables have been amended to meet the requirements of Article 47 GDPR, in order to clarify the necessary content of BCR's and make the distinction between what must be included in BCR's to be presented to the competent supervisory authority in the BCRs application. The amendments will also effect corresponding the principles with the Article 47 text references for controller BCR's, as well as providing further guidance on each of the requirements.

Those seeking to apply for BCR's will find the latest WP29 working documents to be a helpful tool to ensure compliance with GDPR requirements. The applications should still follow the previous format but the updated table of requirements will be the main reference point during the application process.

For those organisations with approved BCR's already in place, they should take steps to update their BCR's in line with the GDPR, and these latest WP29 guidelines should help them identify what changes need to be implemented.