Approved Binding Corporate Rules

This register provides a list of valid BCR.

For BCR approved after the entry into application of the GDPR (25 May 2018), a link to the EDPB Opinion and to the national decision of the supervisory authority is provided. 

Please note that this overview list is provided for information purposes only. Companies have a responsibility to inform the competent supervisory authorities of changes to the BCR. The overview list is updated based on information provided by the companies to the competent supervisory authorities. 

For categories of data subjects in the case of BCR-P, the categories of data relate to data processed on behalf of the controllers outside of the group.

Companies relying on BCR for data transfers are obliged to give data subjects easy access to their BCR. For more details about the BCR, please contact the company.

ABN AMRO Group N.V. 2012
NL SA
Type of BCR:
Controller
Categories of data subjects
Employees
Contractors
Clients, customers
Suppliers, service providers
Other third parties as part of the Group’s respective regular business activities
Final Decision
Accenture 2024
IE SA
Type of BCR:
Processor
Categories of data subjects
Employees, contractors and business contacts
Clients, customers and business contacts
Suppliers, service providers
Other third parties as part of the Group’s respective regular business activities
Download
Opinion / Binding decision References
Opinion 3/2024 on the draft decision of the Irish Supervisory Authority regarding the Processor Binding Corporate Rules of the Accenture Group
Accenture 2009
IE SA
Type of BCR:
Controller
Categories of data subjects
Employees
Contractors
Clients, customers
Suppliers, service providers
Other third parties as part of the Group’s respective regular business activities
Final Decision
ADIENT 2017
DE SA (North Rhine-Westphalia)
Type of BCR:
Controller
Categories of data subjects
Employees
Clients, customers
Suppliers, service providers
Other third parties as part of the Group’s respective regular business activities
Final Decision
AGCO 2018
DE SA (Bavaria)
Type of BCR:
Controller
Categories of data subjects
Employees
Clients, customers
Suppliers, service providers
Other third parties as part of the Group’s respective regular business activities.
Final Decision
AIR LIQUIDE 2018
FR SA
Type of BCR:
Controller
Categories of data subjects
Employees
Contractors
Clients, customers
Suppliers, service providers
Other third parties as part of the Group’s respective regular business activities.
Final Decision
AIRBUS 2014
FR SA
Type of BCR:
Controller
Categories of data subjects
Employees
Contractors
Clients, customers
Suppliers, service providers
Other third parties as part of the Group’s respective regular business activities
Final Decision
Akastor ASA 2015
NO SA
Type of BCR:
Controller
Categories of data subjects
Employees
Clients, customers
Other third parties as part of the Group’s respective regular business activities
Final Decision
Aker Solutions ASA 2015
NO SA
Type of BCR:
Controller
Categories of data subjects
Employees
Clients, customers
Other third parties as part of the Group’s respective regular business activities
Final Decision
Akzo Nobel N.V. 2014
NL SA
Type of BCR:
Controller
Categories of data subjects
Employees
Contractors
Clients, customers
Suppliers, service providers
Other third parties as part of the Group’s respective regular business activities
Final Decision