Binding Corporate Rules for the Transfer of Personal Data: New Approval Procedure

Brussels to the Point December

The cross-border transfer of personal data is a reality within multinational groups. Indeed, most corporate groups constantly exchange data, using shared service centres, shared databases, etc.

When the controller (i.e. the entity that determines the reasons for and means of the processing) transferring the data is established in Belgium, the transfer must comply with the provisions of the Data Protection Act of 8 December 1992, as amended in 1998 ("DPA"), which implements into Belgian law Directive 95/46/EC of 24 October 1995 on the protection of individuals with regard to the processing of personal data and on the free movement of such data.