According to the GDPR, what is a description of binding corporate rules (BCR)?
A decision on the safety of transferring personal data to a non-EEA country. Incorrect. This refers to adequacy decisions.
A measure to compensate for the lack of personal data protection in a third country. Incorrect. This refers to appropriate safeguards.
A set of agreements covering personal data transfers between non-EEA countries. Incorrect. The GDPR does not cover agreements between non-EEA countries.
A set of approved rules on personal data protection used by a group of enterprises. Correct. BCR are a set of rules approved by the supervisory authorities. (Literature: A, Chapter 3; GDPR Article 47)
Currently there are no comments in this discussion, be the first to comment!