Schedule 21, Part 3, paragraph 9(5A)

For the purposes of sub-paragraph (2), binding corporate rules which, immediately before IP completion day, provided for the appropriate safeguards referred to in Article 46(1) of the EU GDPR by virtue of Article 46(5) of the EU GDPR but which were authorised other than by the Commissioner are to be treated as authorised by the Commissioner where— a valid notification of the rules has been made to the Commissioner, the Commissioner has approved them, and that approval has not been withdrawn.

← 5 · All articles · 5B →

Source: legislation.gov.uk · retrieved 2026-09-04