Artikkel 47 — Binding corporate rules

GDPR, forordning (EU) 2016/679

Hva sier GDPR Artikkel 47?

Kort svar, rett fra den offisielle teksten

1. The competent supervisory authority shall approve binding corporate rules in accordance with the consistency mechanism set out in Article 63, provided that they: (a) are legally binding and apply to and are enforced by every member concerned of the group of undertakings, or group of enterprises engaged in a joint economic …

Kilde: GDPR, forordning (EU) 2016/679, lest 2026-08-14.

Offisiell tekst

Lest hos EUs publikasjonskontor for dette CELEX-nummeret. Ordlyden står slik den er publisert, ingenting er skrevet om eller sammenfattet.

Teksten vises på engelsk. Norsk er ikke et offisielt EU-språk, så den offisielle ordlyden finnes ikke på norsk.

Hopp til et punkt: Punkt 1 · Punkt 2 · Punkt 3 · Punkt 4 · Punkt 5 · Punkt 6 · Punkt 7 · Punkt 8 · Punkt 9

1. The competent supervisory authority shall approve binding corporate rules in accordance with the consistency mechanism set out in Article 63, provided that they:

(a) are legally binding and apply to and are enforced by every member concerned of the group of undertakings, or group of enterprises engaged in a joint economic activity, including their employees;

(b) expressly confer enforceable rights on data subjects with regard to the processing of their personal data; and

(c) fulfil the requirements laid down in paragraph 2.

2. The binding corporate rules referred to in paragraph 1 shall specify at least:

(a) the structure and contact details of the group of undertakings, or group of enterprises engaged in a joint economic activity and of each of its members;

(b) the data transfers or set of transfers, including the categories of personal data, the type of processing and its purposes, the type of data subjects affected and the identification of the third country or countries in question;

(c) their legally binding nature, both internally and externally;

(d) the application of the general data protection principles, in particular purpose limitation, data minimisation, limited storage periods, data quality, data protection by design and by default, legal basis for processing, processing of special categories of personal data, measures to ensure data security, and the requirements in respect of onward transfers to bodies not bound by the binding corporate rules;

Artikkelen fortsetter i den offisielle teksten.

Åpne artikkelen på EUR-Lex

• Forrige artikkel
• Neste artikkel

Andre artikler i kapitlet

• Article 44
• Article 45
• Article 46
• Article 48
• Article 49
• Article 50

Hvem gjelder dette for

Registeret navngir fem roller. Åpne en rolle for å se pliktene rettsakten legger på den, hver rad med artikkel og kilde.

• Skytjenesteleverandør

Gjelder dette oss?

• Do ai governance rules apply to a cloud provider?
• Do personal data rules apply to a cloud provider?
• Do cross-border data rules apply to a cloud provider?
• Do cybersecurity rules apply to a cloud provider?
• Do health data rules apply to a cloud provider?
• Do online platforms rules apply to a cloud provider?

Alle roller i registeret · Alle spørsmål per rolle

Teksten er sitert fra den offisielle kilden og er ikke juridisk rådgivning. En nasjonal domstol leser språkversjonen som binder i sin jurisdiksjon.

Tilbake til rettsakten · EU-rettsakter, lest helt ned til nasjonal lov

ExploreWorldAI is operated by Valkiv Ventures AB (Reg. no. 556995-1311), Kungsgatan 8, 111 43 Stockholm, Sweden. EU-hosted, with data processing assessed against the GDPR. Contact: hello@exploreworldai.com.

Machine-readable summaries for AI agents: /llms.txt and /llms-full.txt.