binding corporate rules

Stub entry: single definition derived from the GDPR; sector-specific readings not yet documented — contributions welcome.

personal data protection policies which are adhered to by a controller or processor established on the territory of a Member State for transfers or a set of transfers of personal data to a controller or processor in one or more third countries within a group of undertakings, or group of enterprises engaged in a joint economic activity

Regulation (EU) 2016/679 (GDPR), Art. 4(20)