Romanian DPA approves use of BCRs

Yesterday (27 March 2014) the Romanian DPA approved a decision on the use of Binding Corporate Rules (BCRs).

Historically the DPA would not authorise transfers of personal data outside the European Economic Area on the basis of BCRs. However, the DPA has been reconsidering this position and this decision reverses that policy.

This is great news for the many multi-national companies that use Romania as a low-cost processing centre, but have previously been unable to take advantage of the flexibility provided by the BCRs solution to ensure compliant international transfers.

However, the decision leaves a number of procedural matters unclear and Romania is still not part of the Mutual Recognition Process, so obtaining authorisation may not be plain sailing quite yet…

Tristan Jonckheer

About Tristan Jonckheer

Tristan is a partner in Dentons' Tier 1-ranked Technology team, with expertise in outsourcing, technology and commercial contracts, data protection and telecoms. He advises many major financial services clients on a wide variety of technology matters and is a member of Dentons' cross-practice FinTech Group.

Full bio