Products Coverage Library Evals FAQ About Contact us Log In Get access

Regulation (EU) 2016/679 (GDPR)

Preamble
Recitals 173
Chapter I - General provisions (Article 1-4) 4
Chapter II - Principles (Article 5-11) 7
Chapter III - Rights of the data subject (Article 12-23) 12
Chapter IV - Controller and processor (Article 24-43) 20
Chapter V - Transfers of personal data to third countries or international organisations (Article 44-50) 7
Chapter VI - Independent supervisory authorities (Article 51-59) 9
Chapter VII - Cooperation and consistency (Article 60-76) 17
Chapter VIII - Remedies, liability and penalties (Article 77-84) 8
Chapter IX - Provisions relating to specific processing situations (Article 85-91) 7
Chapter X - Delegated acts and implementing acts (Article 92-93) 2
Chapter XI - Final provisions (Article 94-99) 6

binding corporate rules

Defined in Article 4, Regulation (EU) 2016/679 (GDPR)

Definitions over time (1)

24/05/2016 – today applies on 10/11/2026 Article 4, Regulation (EU) 2016/679 (GDPR) Scope: Whole act

‘binding corporate rules’ means personal data protection policies which are adhered to by a controller or processor established on the territory of a Member State for transfers or a set of transfers of personal data to a controller or processor in one or more third countries within a group of undertakings, or group of enterprises engaged in a joint economic activity;

Earlier definition records in this act (1)

Open an entry to see its definitions, dates and uses. Separate scopes and histories are kept intact.

Article 4(20) Historical · definitions end 24/05/2016

Used in (24 places in 12 provisions on 10/11/2026)

Regulation (EU) 2016/679 (GDPR) (24 in 12)

Recital 107 · Recital 108 · Recital 110 · Recital 168 · Article 4 · Article 46 · Article 47¹⁰ · Article 49² · Article 57 · Article 58 · Article 64 · Article 70³