Luxembourg DPA approves the BCR of PayPal
The PayPal Group has adopted Binding Corporate Rules, which define its global data protection policy with regard to international transfers of personal data. The purpose of these rules is to ensure that the same level of protection as in the EU is provided to employees and clients of PayPal when their personal data are transferred to entities within the same group located outside of the EU.
Source: The CNPD approves the BCR of PayPal — National Commission for Data Protection // Luxembourg