This guidance outlines the updated cooperation procedure for the approval of Binding Corporate Rules (BCR) for controllers and processors under the GDPR. It replaces the previous WP263rev.01 document adopted on 11 April 2018, and reflects practical experience gained. It describes the roles of the BCR Lead Supervisory Authority, the review and cooperation phases among supervisory authorities, and the steps leading to EDPB opinion and final approval. It also includes an annex on informal BCR sessions and their procedural aspects.
Author: European Data Protection Board
Status: Adopted / Published
Adoption date: 2025-03-13
Last updated: 08 Aug 2025
Category: Guidance
Subcategory: Other official document