Will companies need to identify new lead supervisory authorities for their UK BCRs?
On Jan. 9, the European Commission’s Directorate-General for Justice and Consumers published a “Notice to Stakeholders” on the intersection of Brexit and EU data protection rules. The guidance clarified, “Transfers based on approved standard data protection clauses or on binding corporate rules will not be subject to a further, specific authorisation from a supervisory authority.” One interpretation of this statement is that BCRs currently approved by the U.K. Information Commissioner’s Office will continue to be a compliant way to transfer data out of the EU after Brexit officially takes hold.
Source: Will companies need to identify new lead supervisory authorities for their UK BCRs?
