Approval and Requirements for BCR-P (Art. 47 GDPR)
Bitkom welcomes the Recommendations 1/2026 of the European Data Protection Board on Binding Corporate Rules for Processors (BCR-P), which aim to simplify approvals for intra-group transfers by processors. However, it raises concerns regarding restrictions on the scope of application, audit and transparency obligations, TIA requirements, and BCR change notifications, which may lead to operational inefficiencies without improving protection under the GDPR.
