Powered by Lexis+®
Jurisdiction(s):
United Kingdom
CASE STUDY

“What I spend on my yearly subscription, equals to a day's billable hours for me not to mention time efficiency and peace of mind.”

Jai Stern

Access all documents on Binding corporate rules

Binding corporate rules meaning

What does Binding corporate rules mean?
Binding corporate rules (BCRs) are a multinational group’s internal data protection policies that enable lawful cross‑border transfers of personal data within the group from the UK or EEA to countries without an adequacy decision. They are a transfer mechanism under Article 47 UK GDPR and EU GDPR. BCRs may apply to controllers (BCR‑C) or processors (BCR‑P). Requirements include group‑wide, legally binding commitments; enforceable rights for data subjects; transparency, training and audits; complaint handling; allocation of responsibility and liability; and measures to verify effectiveness. When approved by the relevant supervisory authority, BCRs can be used instead of standard contractual clauses for intra‑group data exports. Approval is by the Information Commissioner’s Office (UK) for UK BCRs and by a lead supervisory authority (in Ireland, the Data Protection Commission) for EU BCRs. Post‑Brexit, EU‑approved BCRs are not automatically valid for UK transfers; separate UK BCR approval is needed, typically by adapting EU BCR documentation for the ICO. BCRs still require transfer risk assessments and any necessary supplementary measures post‑Schrems II. Usage is broadly consistent across England & Wales, Scotland, Northern Ireland and Ireland.
Speed up all aspects of your legal work with tools that help you to work faster and smarter. Win cases, close deals and grow your business–all whilst saving time and reducing risk.

View the related Checklists about Binding corporate rules

CHECKLISTS
UK and EU mandatory corporate environmental, climate and sustainability reporting: in-scope entities, thresholds and timelines for companies and LLPs (TCFD, UK Listing Rules, CSRD, EU Taxonomy): practitioner checklist

This Checklist outlines which companies and limited liability partnerships (LLPs) fall within the main UK and EU compulsory environmental reporting regimes. It offers a high-level overview and points to the sources for the applicable reporting rules. For fuller coverage of the binding reporting obligations, see Practice Notes: CSR, ESG and human rights reporting and initiatives and EU mandatory corporate sustainability reporting. For an overview of the voluntary disclosures many companies and LLPs follow, see Practice Notes: TCFD recommendations and other ESG reporting frameworks, standards and benchmarks [Archived] and Investor group guidance on environmental, social and governance (ESG) issues. UK requirements Strategic report to contain description of principal risks and uncertainties. Scope: All companies (other than micro and small companies). Traded LLPs and banking LLPs. Source: Companies Act 2006 (CA 2006), CA 2006, s 414C(2)(b). Applied to traded LLPs and banking LLPs by Limited Liability Partnerships (Accounts and Audit) (Application of Companies Act 2006) Regulations 2008, SI 2008/1911, Reg 12A. ...

Read More Right Arrow

View the related Flowcharts about Binding corporate rules

FLOWCHARTS
UK GDPR DPIA screening flowchart: mandatory Article 35(3) and ICO high‑risk triggers, and when a PIA suffices

STOP PRESS: This document is being revised to take account of the Data (Use and Access) Act 2025 (DUAA 2025), which updates the UK GDPR and the Data Protection Act 2018. For more on the compliance impact of DUAA 2025, see Practice Note: Data (Use and Access) Act 2025—compliance implications... This Flowchart steers you through the lawful mechanisms for sending personal data to a country outside the UK, for example: an adequacy decision or regulation appropriate safeguards such as standard contractual clauses (SCCs) or the International Data Transfer Agreement (IDTA), or binding corporate rules (BCRs) a derogation Such transfers are barred by the data protection regime unless one of these tools is in place. These mechanisms exist to ensure data subjects remain protected when their personal data leaves the UK... The mechanisms follow a hierarchy, and this Flowchart helps you select the route most suitable for your organisation and processing operations... This Flowchart reflects the UK General Data...

Read More Right Arrow
FLOWCHARTS
International personal data transfers from the UK: decision flowchart for adequacy, SCCs/IDTA, BCRs or derogations (including compelling legitimate interests), with ICO/EU TIA/TRA approaches—updated for DUAA 2025

ARCHIVED: This flowchart is archived and is no longer maintained...

Read More Right Arrow
FLOWCHARTS
Intestacy distribution flowchart: spouse/civil partner entitlements and succession with or without issue under the Administration of Estates Act 1925 (England and Wales)

STOP PRESS: This document is currently being revised to take account of the implementation of the Data (Use and Access) Act 2025 (DUAA 2025), which modifies the UK GDPR and the Data Protection Act 2018. For further guidance on the compliance impact of DUAA 2025, refer to Practice Note: Data (Use and Access) Act 2025—compliance implications. This Flowchart follows the approach outlined by the European Data Protection Board (EDPB) to assess whether you may carry out an international transfer of personal data relying on standard contractual clauses (SCCs) or binding corporate rules (BCRs). These transfer tools can be used only where the safeguards, enforceable rights and legal redress available to individuals in the destination country are essentially equivalent to those guaranteed by the General Data Protection Regulation (GDPR). The ‘essentially equivalent’ benchmark derives from the Facebook Ireland and Schrems ruling (Schrems II), determined under the EU GDPR. The Information Commissioner’s Office (ICO) has issued Guidance on transfer risk assessments, which adopts the phrase ‘sufficiently similar’ for transfers under the...

Read More Right Arrow

View the related News about Binding corporate rules

NEWS
UK and EU information law highlights: data protection and cybersecurity—EDPB GDPR seal, third-country guidance, NCSC review, EU Cyber Solidarity Act, NIS2/CER enforcement, LexTalk and content updates

In this issue: Data protection Cybersecurity LexTalk® Information Law: a Lexis®Nexis community Daily and weekly news alerts New and updated content Data protection EDPB approves certification criteria for EU Data Protection Seal under EU GDPR The EDPB has endorsed the certification criteria for the EU Data Protection Seal, a scheme confirming adherence to the EU GDPR (Regulation (EU) 2016/679) within processing activities, including cross-border transfers to third countries. The seal underpins appropriate safeguards for such transfers, providing a harmonised assurance benchmark across the EU. It also sets out the functions of supervisory authorities, accreditation bodies and certification bodies to secure consistent application of GDPR rules. See: LNB News 03/12/2024 34. Guidance for consultation on data sharing with third-country authorities The EDPB has issued refreshed guidance clarifying the framework for transfers to authorities in third countries. It addresses cases where such disclosures proceed under appropriate safeguards in the EU GDPR, for example via standard contractual clauses or...

Read More Right Arrow
NEWS
EU regulatory and case-law weekly briefing: competition and state aid, AI and data, financial services and insurance, life sciences, TMT, corporate and trade—19 March 2026

In this issue: Competition and state aid Corporate Data protection and cybersecurity Free movement, employment and immigration Financial services Insurance and reinsurance IP Life sciences Regulatory TMT International trade Daily and weekly news alerts New and updated content Trackers and horizon scanners Competition and state aid State aid—Commission reviews State aid rules for banks in difficulty The European Commission has launched a call for evidence to update the State aid regime for banks in difficulty. The current framework consists of six distinct communications, last revised in 2013. See News Analysis: EU Competition law—daily round-up (17/03/2026). State aid—Commission adopts new State aid rules to boost the use of more sustainable ways of transport The Commission has approved new State aid Land and Multimodal Transport Guidelines (LMT Guidelines) and a Transport Block Exemption Regulation (TBER), refreshing the EU State aid framework to encourage more sustainable passenger and freight transport,...

Read More Right Arrow
NEWS
UK, EU and international financial services regulation: weekly update for lawyers—enforcement, capital markets, consumer protection, ESG, MiFID, payments, crypto and AI—8 May 2025

In this issue: UK, EU and international regulators and bodies Financial crime and sanctions Consumer protection Complaints, compensation and claims management Investigations, enforcement and discipline Regulation of capital markets Packaged Retail and Insurance-based Investment Products (PRIIPs) Dispute resolution for financial services lawyers Regulation of derivatives Sustainable finance and ESG Banks and mutuals Investment funds and asset management UK MiFID II EU MiFID II Consumer credit, mortgage and home finance Payment services and systems Fintech and cryptoassets Regulation of AI in FS LexTalk®Financial Services: a Lexis®Nexis community Financial Services Enforcement Database Daily and weekly news alerts Intraday news alerts Dates for your diary UK, EU and international regulators and bodies Treasury Select Committee publishes letter from FCA CEO following recent evidence session The House of Commons (HoC) Treasury Select Committee (TSC) has issued a letter dated 30 April 2025 from Nikhil...

Read More Right Arrow

View the related Practice Notes about Binding corporate rules

PRACTICE NOTES
UK DTR 2: issuer obligations on disclosure, delay, control and selective disclosure of inside information—FCA/ESMA guidance, case law, COVID‑19 context and enforcement (post‑Brexit UK MAR)

Resource Note This Resource Note signposts key commentary, analysis and materials to aid interpretation and offer practical direction on using Chapter 2 of the Disclosure Guidance and Transparency Rules (DTR 2). Where relevant, it draws on: the Financial Conduct Authority (FCA) Handbook FCA Knowledge Base—Procedural and Technical notes (formal guidance binding on the FCA) FCA consultation and discussion papers, policy and feedback statements, and warnings Primary Market Bulletins and other FCA publications legacy UKLA technical and procedural notes and the UKLA’s newsletter List!, where still pertinent assimilated EU legislation EU Directives and EU Regulations, where helpful to construing a provision Lexis+® UK analysis and resources Setting the scene What it covers: DTR 2 prescribes the framework for issuers to disclose and manage inside information, supporting timely and even-handed release of market-sensitive information. It also identifies specific situations permitting a delay to public disclosure of inside information, together with the safeguards required to keep such information...

Read More Right Arrow
PRACTICE NOTES
UK FCA DTR 1–1C: application, post‑Brexit and 2024 listing reforms, MAR interplay, audit committees, misleading disclosures and related party rules

This Resource Note spotlights commentary, analysis and materials to aid interpretation and give practical guidance on applying Chapters 1, 1A, 1B and 1C of the Disclosure Guidance and Transparency Rules: DTR 1, DTR 1A, DTR 1B and DTR 1C respectively. Materials referenced here include, where pertinent: the Financial Conduct Authority (FCA) Handbook FCA Knowledge Base guidance—Procedural notes and Technical notes (constituting formal guidance and binding on the FCA) FCA consultation papers, discussion papers, policy statements, feedback statements and warnings Primary Market Bulletins and other FCA publications former UKLA technical and procedural notes and the UKLA newsletter List!, where still relevant to interpreting or applying a provision assimilated EU legislation EU Directives and EU Regulations, where relevant to interpreting a provision Lexis+ UK analysis and resources Setting the scene What it covers: DTR 1 sets out the Disclosure guidance, explaining its scope and purpose; DTR 1A sets out the transparency rules with their scope and purpose;...

Read More Right Arrow
PRACTICE NOTES
DTR 4 (UK): periodic financial reporting for UK regulated market issuers—annual and half-yearly reports, structured digital reporting (XHTML/iXBRL), Brexit amendments, exemptions, equivalence and FCA/FRC guidance

This Resource Note summarises the principal provisions of Chapter 4 of the Disclosure Guidance and Transparency Rules (DTR 4), which addresses the periodic financial reporting duties for an issuer whose transferable securities are admitted to trading on a UK regulated market. It signposts pertinent commentary, analysis and materials to support the interpretation of, and deliver practical guidance on the application of, DTR 4. Materials considered in this Resource Note include, where applicable: the Financial Conduct Authority (FCA) Handbook FCA guidance in its Knowledge Base—Procedural notes and Technical notes (which amount to formal guidance and are binding on the FCA) FCA consultation papers, discussion papers, policy statements, feedback statements and warnings Primary Market Bulletins and other FCA publications former UKLA technical and procedural notes and the UKLA's newsletter List!, where still relevant to the interpretation or application of a provision assimilated EU legislation EU Directives and EU Regulations, where relevant to interpretation of a provision Lexis+® UK analysis and resources...

Read More Right Arrow

View the related Precedents about Binding corporate rules

PRECEDENTS
Customisable precedent articles for a private company limited by guarantee (Companies Act 2006), excluding model articles

Part 1, interpretation and limitation of liability Unless the context requires otherwise, these articles use terms defined in the Companies Act 2006 (and any amending or subordinate legislation) and within these articles. Defined terms include: address; articles; bankruptcy (including similar overseas procedures); chair and chair of the meeting (articles 13 and 30); Companies Acts; director (including anyone acting as such); document (including electronic); electronic form/means and hard copy form; instrument; member; ordinary and special resolutions; eligible director; participate; proxy notice; relevant officer (non‑auditor officers of the company or any group undertaking, present or former); subsidiary; and writing (any visible representation, including electronic) The model articles are excluded. Unless otherwise stated, statutory expressions bear the meaning they had when these articles became binding. References to legislation include any modification, re‑enactment or replacement. Singular includes plural and vice versa; masculine includes feminine and neuter; persons include corporations Each member’s liability is limited to £1, payable on a winding up while a member or within one year of ceasing, towards:...

Read More Right Arrow
PRECEDENTS
Supplier-Favourable Business-to-Business Sale of Goods Terms and Conditions (England and Wales)

1 Definitions and interpretation In these Conditions, key terms include: Adequate Procedures (as per BA 2010); Affiliate (entities under common Control); Applicable Law (binding laws and guidance across relevant jurisdictions); Associated Person/Associated With (as defined for bribery, tax evasion and fraud by BA 2010, CFA 2017 and ECCTA 2023); Business Day (excluding weekends and bank/public holidays); Conditions (these sale terms); Confidential Information (commercial, technical or other identified confidential material); Contract (the agreement comprising these Conditions and the Order); Control (as specified); Customer and Supplier (the purchasing and supplying parties); Documentation; Force Majeure (events beyond reasonable control); Goods; Intellectual Property Rights and any IPR Claim; Location; MSA 2015; Order; Prevention Procedures; Price; Specification; VAT; and Warranty Period. Interpretation rules: references to the Contract include its schedules and annexes; headings are for convenience; references to a party include successors and permitted assigns; person includes natural and corporate bodies; company covers any body corporate; gender and number include each other; “including” and similar expressions are illustrative only; writing covers legible, non‑transitory...

Read More Right Arrow
PRECEDENTS
Intra-group controller-processor data processing precedent (UK GDPR and Data Protection Act 2018): security, sub-processors, audit, breach notification and international transfers (SCCs/BCRs)

Defined terms : In addition to the definitions set out below, this Precedent also uses the defined terms ‘Agreement’, ‘Business Day’, ‘Customer’, ‘party’ / ‘parties’, ‘Services’ and ‘Supplier’, which are general rather than specific to data processing and are assumed to be defined separately in the relevant agreement. Refer to the drafting notes for further guidance. The Schedule 1 Definitions and interpretation 1.1 In this Schedule: Adequacy Regulation means any valid adequacy regulation referenced in Article 45A of the GDPR; Attached Standard Contractual Clauses means the provisions set out in [ Annex [ insert ] to ] Appendix 7; Binding Corporate Rules means the binding corporate rules referred to in Appendix 6; Controller has the meaning given in Data Protection Laws; Data Protection Impact Assessment shall be interpreted in line with Data Protection Laws; Data Protection Laws means all applicable laws relating to the processing, privacy and/or use of Personal Data, as applicable to either party or the Services,...

Read More Right Arrow