Preamble
Recitals 173
Chapter I - General provisions (Article 1-4) 4
Chapter II - Principles (Article 5-11) 7
Chapter III - Rights of the data subject (Article 12-23) 12
Chapter IV - Controller and processor (Article 24-43) 20
Chapter V - Transfers of personal data to third countries or international organisations (Article 44-50) 7
Chapter VI - Independent supervisory authorities (Article 51-59) 9
Chapter VII - Cooperation and consistency (Article 60-76) 17
Chapter VIII - Remedies, liability and penalties (Article 77-84) 8
Chapter IX - Provisions relating to specific processing situations (Article 85-91) 7
Chapter X - Delegated acts and implementing acts (Article 92-93) 2
Chapter XI - Final provisions (Article 94-99) 6

binding corporate rules

Definitions over time (1)

04/05/2016 – 24/05/2016 Article 4, Regulation (EU) 2016/679 (GDPR) Scope: Whole act

‘binding corporate rules’ means personal data protection policies which are adhered to by a controller or processor established on the territory of a Member State for transfers or a set of transfers of personal data to a controller or processor in one or more third countries within a group of undertakings, or group of enterprises engaged in a joint economic activity;

Each has its own scope, dates and uses. Open one to see when it applies.

No text uses this concept on 12/11/2026.