Use of Approved Binding Corporate Rules for Group Transfers, v1.0
Specifies requirements in accordance with General Data Protection Regulation (GDPR) Art. 47(1).
Assessment Step
|
1
Use of Approved Binding Corporate Rules for Group Transfers (UseofApprovedBindingCorporateRulesforGroupTransfers)
If the entity transfers personal data to a third country based on binding corporate rules, does it ensure that the rules have been approved by the competent supervisory authority and meet all requirements of Article 47?
Artifact
A1
Provide evidence (e.g. organizational policies, procedures, compliance/assessment reports, etc.) and supporting notes as appropriate to support the assessor's response to this assessment step.
|
Conformance Criteria (1)
|
Use of Approved Binding Corporate Rules for Group Transfers
The data controller and the data processor may transfer personal data to a third country based on binding corporate rules only if those rules have been approved by the competent supervisory authority and meet the conditions set out in this article.
Citation
GDPR
Art. 47(1), Recital 110
|