CNIL Simplifies Registration Requirements For International Data Transfers Based On BCRS
The CNIL announced the implementation of a new procedure that will simplify the registration formalities for French affiliates of groups that have implemented Binding Corporate Rules (BCRs).
Currently, the CNIL 's prior authorization is required for each type of data transfer outside of the EU when the transfer is based on BCRs. The CNIL now proposes to issue a single authorization decision to each group that has implemented BCRs. The group 's affiliates that are data controllers and bound by the BCRs will then need to submit only a simplified registration for all of their data transfers outside of the EU based on the group 's BCRs. The affiliates will not have to obtain the CNIL 's prior authorization for each data transfer.