The recommendations, published for public consultation, set out the procedural requirements for submitting an application for approval of Processor Binding Corporate Rules (BCR-P) under Article 47 GDPR, along with the substantive elements and principles that BCR-P must contain to provide appropriate safeguards for international transfers of personal data carried out by processors.
Author: European Data Protection Board
Status: Draft
Adoption date: 2026-01-19
Last updated: 19 Aug 2026
Category: Guidance
Subcategory: Official recommendations