Data Protection – Binding Corporate Rules – approval application form published

European data protection law requires that data can only be transferred outside the European Economic Area under strict conditions, even where the transfer is within a corporate group. The most effective way for a multi-national group to transfer personal data outside Europe is to implement a set of “Binding Corporate Rules”, which apply to the entire group. These rules must be submitted to and approved by the data protection authority of each European country from which data will be transferred.

The International Chamber of Commerce has previously published guidance on the preparation of Binding Corporate Rules, and has just (12 September 2006) issued a standard application form for seeking approval from data protection authorities.

For further information, see http://www.iccwbo.org/icciggb/index.html