Yesterday (27 March 2014) the Romanian DPA approved a decision on the use of Binding Corporate Rules (BCRs).
Historically the DPA would not authorise transfers of personal data outside the European Economic Area on the basis of BCRs. However, the DPA has been reconsidering this position and this decision reverses that policy.
This is great news for the many multi-national companies that use Romania as a low-cost processing centre, but have previously been unable to take advantage of the flexibility provided by the BCRs solution to ensure compliant international transfers.
However, the decision leaves a number of procedural matters unclear and Romania is still not part of the Mutual Recognition Process, so obtaining authorisation may not be plain sailing quite yet…