{"id":9045,"date":"2022-02-01T17:35:37","date_gmt":"2022-02-01T16:35:37","guid":{"rendered":"https:\/\/www.cabinetbouchara.com\/regles-dentreprise-contraignantes-bcr\/"},"modified":"2026-02-10T08:57:17","modified_gmt":"2026-02-10T07:57:17","slug":"binding-corporate-rules-bcr","status":"publish","type":"page","link":"https:\/\/www.cabinetbouchara.com\/en\/lexicon\/binding-corporate-rules-bcr\/","title":{"rendered":"Binding Corporate Rules (BCR)"},"content":{"rendered":"<p><a href=\"https:\/\/www.cabinetbouchara.com\/en\/lexicon\/\">Lexicon<\/a> <span style=\"color: #F5B63F\">&gt; <strong>Binding Corporate Rules (BCR)<\/strong><\/span><\/p>\n<p>IT Glossary<\/p>\n<p style=\"text-align: justify\">Binding Corporate Rules are internal rules for the protection of personal data which may be applied by private law organizations, data <a href=\"https:\/\/www.cabinetbouchara.com\/en\/lexicon\/person-in-charge-of-the-treatment\/\" target=\"_blank\" rel=\"noopener noreferrer\">controller<\/a> or <a href=\"https:\/\/www.cabinetbouchara.com\/en\/lexicon\/subcontractor\/\" target=\"_blank\" rel=\"noopener noreferrer\">subcontractor<\/a>, established on the territory of a Member State of the European Union, for <a href=\"https:\/\/www.cabinetbouchara.com\/en\/lexicon\/data-transfer\/\" target=\"_blank\" rel=\"noopener noreferrer\">transfers<\/a> or for a set of transfers of personal data to other bodies under private law, controller or processor, established in one or more countries outside the European Union within the same group of companies, or a group of companies engaged in a joint economic activity.<\/p>\n<p style=\"text-align: justify\">The possibility of using binding corporate rules is thus mainly relevant for private multinational organizations, established in several countries of the European Union and outside the European Union.<\/p>\n<p style=\"text-align: justify\">They can provide appropriate safeguards for the protection of personal data for international data transfers:<\/p>\n<ul>\n<li style=\"text-align: justify\">where the laws or practices of the country of the data importer do not compromise the adequate level of protection afforded by the company&#8217;s policies, and\/or;<\/li>\n<\/ul>\n<ul>\n<li style=\"text-align: justify\">in the absence of a decision by the European Commission finding that the third country provides an adequate level of protection (adequacy decision).<\/li>\n<\/ul>\n<p style=\"text-align: justify\">They are also an alternative to the European Commission&#8217;s standard contractual clauses.<\/p>\n<p style=\"text-align: justify\">In order to provide appropriate safeguards for the transfer of data, binding corporate rules must be assessed and validated by the competent supervisory authority.<\/p>\n<p style=\"text-align: justify\">In order to be validated by the supervisory authority, binding corporate rules must specify, among other things:<\/p>\n<ul>\n<li style=\"text-align: justify\">The structure and contact information of the group of companies;<\/li>\n<li style=\"text-align: justify\"><a href=\"https:\/\/www.cabinetbouchara.com\/en\/lexicon\/data-transfer\/\" target=\"_blank\" rel=\"noopener noreferrer\">Data transfers<\/a>, including categories of personal data;<\/li>\n<li style=\"text-align: justify\">The type of <a href=\"https:\/\/www.cabinetbouchara.com\/en\/lexicon\/data-processing\/\" target=\"_blank\" rel=\"noopener noreferrer\">processing<\/a> and its <a href=\"https:\/\/www.cabinetbouchara.com\/en\/lexicon\/purpose\/\" target=\"_blank\" rel=\"noopener noreferrer\">purposes<\/a>;<\/li>\n<li style=\"text-align: justify\">The type of people involved;<\/li>\n<li style=\"text-align: justify\">The name of the third country or countries;<\/li>\n<li style=\"text-align: justify\">Their legally binding nature ;<\/li>\n<li style=\"text-align: justify\">Application of general data protection principles;<\/li>\n<li style=\"text-align: justify\">The rights of the persons concerned ;<\/li>\n<li style=\"text-align: justify\">The tasks of any <a href=\"https:\/\/www.cabinetbouchara.com\/en\/lexicon\/data-protection-officer-dpo\/\" target=\"_blank\" rel=\"noopener noreferrer\">data protection officer<\/a>;<\/li>\n<li style=\"text-align: justify\">Claims procedures;<\/li>\n<li style=\"text-align: justify\">Mechanisms put in place to ensure that compliance is monitored.<\/li>\n<\/ul>\n<p style=\"text-align: justify\">In any event, even without the approval of the supervisory <a href=\"https:\/\/www.cabinetbouchara.com\/en\/lexicon\/controlling-authority\/\" target=\"_blank\" rel=\"noopener noreferrer\">authority<\/a>, binding corporate rules are a compliance tool that contributes to the <a href=\"https:\/\/www.cabinetbouchara.com\/en\/lexicon\/accountability-responsabilite\/\" target=\"_blank\" rel=\"noopener noreferrer\">accountability<\/a> of a group of companies and sets an example for groups that have decided to implement them.<\/p>\n<h2>RGPD Point<\/h2>\n<p style=\"text-align: justify\"><span> <\/span><span>&#8221; <\/span><span>A group of undertakings, or a group of enterprises engaged in a joint economic activity, should be able to make use of approved binding corporate rules for its international transfers from the Union to organisations within the same group of undertakings, or group of enterprises engaged in a joint economic activity, provided that such corporate rules include all essential principles and enforceable rights to ensure appropriate safeguards for transfers or categories of transfers of personal data.&#8221;<\/span><\/p>\n<p style=\"text-align: justify\">\n<p style=\"text-align: justify\"><span>Recital 110 of the GDPR<\/span><\/p>\n<h2 style=\"text-align: justify\">Point of jurisprudence<\/h2>\n<p style=\"text-align: justify\"><span>The Swedish supervisory authority points out that &#8221;  <\/span><i><span>the purpose of the CJEU Schrems II ruling may also affect transfers of personal data that take place with the help of binding corporate rules, as the legislation of a third country may affect the protection offered by those binding corporate rules. The Court of Justice of the European Union has ruled that it is up to the data controller to assess whether the level of protection required by European legislation is respected in the third country concerned  <\/span><\/i><span>&#8220;.  <\/span><\/p>\n<p style=\"text-align: justify\"><span>Datainspektionen, December 10, 2020, No. DI-2019-9432<\/span><\/p>\n<p style=\"text-align: justify\">The Bouchara Law firm assists you in particular in :<\/p>\n<ul style=\"text-align: justify\">\n<li>Making your organization GDPR compliant;<\/li>\n<li>The drafting of data protection policies (privacy policy, computer charter &#8230;);<\/li>\n<li>Documentation of your processing (register of processing activities, register of violations, privacy <a href=\"https:\/\/www.cabinetbouchara.com\/en\/lexicon\/data-privacy-impact-assessment-dpa\/\" target=\"_blank\" rel=\"noopener noreferrer\">impact analysis<\/a>, prior consultation&#8230;);<\/li>\n<li>Obtaining certifications and adhering to <a href=\"https:\/\/www.cabinetbouchara.com\/en\/lexicon\/code-of-conduct\/\" target=\"_blank\" rel=\"noopener noreferrer\">codes of conduct<\/a>;<\/li>\n<li>The study of the legal feasibility of the implementation of a new <a href=\"https:\/\/www.cabinetbouchara.com\/en\/lexicon\/data-processing\/\" target=\"_blank\" rel=\"noopener noreferrer\">personal data processing<\/a>;<\/li>\n<li>The drafting and transmission of your codes of conduct to the <a href=\"https:\/\/www.cabinetbouchara.com\/en\/lexicon\/national-commission-for-information-technology-and-civil-liberties-cnil\/\" target=\"_blank\" rel=\"noopener noreferrer\">CNIL<\/a> for approval;<\/li>\n<li>Legal analysis of the compliance of your data processing, including data transfers outside the European Economic Area;<\/li>\n<li>Drafting and negotiating your data processing agreements (DPA);<\/li>\n<li>Drafting your Binding Corporate Rules (BCR) and Codes of Conduct;<\/li>\n<li>Training and awareness of your employees.<\/li>\n<\/ul>\n<p style=\"text-align: justify\">We are also the external <a href=\"https:\/\/www.cabinetbouchara.com\/en\/lexicon\/data-protection-officer-dpo\/\" target=\"_blank\" rel=\"noopener noreferrer\">Data Protection Officer<\/a> of many data <a href=\"https:\/\/www.cabinetbouchara.com\/en\/lexicon\/person-in-charge-of-the-treatment\/\" target=\"_blank\" rel=\"noopener noreferrer\">processors<\/a> and <a href=\"https:\/\/www.cabinetbouchara.com\/en\/lexicon\/subcontractor\/\" target=\"_blank\" rel=\"noopener noreferrer\">subcontractors<\/a>.<\/p>\n<h2>Other definitions<\/h2>\n<h3><a href=\"https:\/\/www.cabinetbouchara.com\/en\/lexicon\/brand\/\">Brand<\/a><\/h3>\n<p><a href=\"https:\/\/www.cabinetbouchara.com\/en\/lexicon\/brand\/\">A trademark is a distinctive sign allowing its owner (natural or legal person) to differentiate its products and services&#8230;<\/a><\/p>\n<h3><a href=\"https:\/\/www.cabinetbouchara.com\/en\/lexicon\/gdrp\/\">RGPD<\/a><\/h3>\n<p><a href=\"https:\/\/www.cabinetbouchara.com\/en\/lexicon\/gdrp\/\">The GDPR refers to Regulation (EU) 2016\/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals&#8230;<\/a><\/p>\n<h3><a href=\"https:\/\/www.cabinetbouchara.com\/en\/lexicon\/renowned-or-well-known-trademark\/\">Notorious brand<\/a><\/h3>\n<p><a href=\"https:\/\/www.cabinetbouchara.com\/en\/lexicon\/renowned-or-well-known-trademark\/\">The concepts of reputed and well-known trademarks have been defined by the jurisprudence and designate a trademark that is widely known by the public&#8230;<\/a><\/p>\n<h3><a href=\"https:\/\/www.cabinetbouchara.com\/en\/lexicon\/wipo\/\">WIPO<\/a><\/h3>\n<p><a href=\"https:\/\/www.cabinetbouchara.com\/en\/lexicon\/wipo\/\">The World Intellectual Property Organization (WIPO) is an international institution of the United Nations, located in Geneva&#8230;<\/a><\/p>\n<p><a href=\"https:\/\/www.cabinetbouchara.com\/en\/lexicon\/\">See the lexicon<img decoding=\"async\" data-src=\"https:\/\/www.cabinetbouchara.com\/wp-content\/uploads\/2021\/12\/Fichier-24.svg\" width=\"25\" height=\"25\" alt=\"\" class=\"wp-image-1012 alignnone size-medium lazyload\" style=\"--smush-placeholder-width: 25px; --smush-placeholder-aspect-ratio: 25\/25;margin-left: 15px;margin-bottom: -6px\" src=\"data:image\/svg+xml;base64,PHN2ZyB3aWR0aD0iMSIgaGVpZ2h0PSIxIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmciPjwvc3ZnPg==\" \/><\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Lexicon &gt; Binding Corporate Rules (BCR) IT Glossary Binding Corporate Rules are internal rules for the protection of personal data which may be applied by private law organizations, data controller or subcontractor, established on the territory of a Member State of the European Union, for transfers or for a set of transfers of personal data &#8230; <a title=\"Binding Corporate Rules (BCR)\" class=\"read-more\" href=\"https:\/\/www.cabinetbouchara.com\/en\/lexicon\/binding-corporate-rules-bcr\/\" aria-label=\"Read more about Binding Corporate Rules (BCR)\">Read more<\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"parent":9175,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"inline_featured_image":false,"footnotes":""},"class_list":["post-9045","page","type-page","status-publish"],"_links":{"self":[{"href":"https:\/\/www.cabinetbouchara.com\/en\/wp-json\/wp\/v2\/pages\/9045","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.cabinetbouchara.com\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/www.cabinetbouchara.com\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/www.cabinetbouchara.com\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.cabinetbouchara.com\/en\/wp-json\/wp\/v2\/comments?post=9045"}],"version-history":[{"count":5,"href":"https:\/\/www.cabinetbouchara.com\/en\/wp-json\/wp\/v2\/pages\/9045\/revisions"}],"predecessor-version":[{"id":19556,"href":"https:\/\/www.cabinetbouchara.com\/en\/wp-json\/wp\/v2\/pages\/9045\/revisions\/19556"}],"up":[{"embeddable":true,"href":"https:\/\/www.cabinetbouchara.com\/en\/wp-json\/wp\/v2\/pages\/9175"}],"wp:attachment":[{"href":"https:\/\/www.cabinetbouchara.com\/en\/wp-json\/wp\/v2\/media?parent=9045"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}