EDPB Opinion on Tessi Group's BCRs

Opinion 23/2025 on the draft decision of the French Supervisory Authority regarding the Controller Binding Corporate Rules of the Tessi Group

The European Data Protection Board (EDPB) has issued Opinion 23/2025 concerning the draft decision by the French Supervisory Authority on the Controller Binding Corporate Rules (BCRs) of the Tessi Group. This opinion is a significant step in the ongoing efforts to ensure that international data transfers comply with the General Data Protection Regulation (GDPR).

Understanding Binding Corporate Rules (BCRs)

BCRs are internal rules adopted by multinational companies to allow the transfer of personal data within the group across borders, in compliance with EU data protection standards. They are a key mechanism for ensuring that data protection principles are upheld when data is transferred internationally.

The Role of the French Supervisory Authority

The French Supervisory Authority, known as the CNIL, plays a crucial role in assessing and approving BCRs. Their draft decision regarding the Tessi Group's BCRs reflects a thorough evaluation of the company's data protection measures and their alignment with GDPR requirements.

EDPB's Opinion and Its Implications

The EDPB's opinion provides guidance and recommendations to ensure that the Tessi Group's BCRs meet the necessary standards for data protection. This includes ensuring transparency, accountability, and the protection of data subjects' rights.

Quelques pistes pour l'intégration opérationnelle dans votre dispositif :

- Évaluer et mettre à jour les règles internes de transfert de données pour s'assurer qu'elles sont conformes aux recommandations de l'EDPB.

- Former les employés sur les nouvelles procédures de protection des données.

- Mettre en place des mécanismes de contrôle pour surveiller la conformité continue avec les BCRs.

- Collaborer avec les autorités de protection des données pour s'assurer que toutes les pratiques sont alignées avec les exigences réglementaires.

- Documenter toutes les politiques et procédures pour garantir la transparence et la responsabilité.