Support Centre

You have out of 5 free articles left for the month

Signup for a trial to access unlimited content.

Start Trial

Continue reading on DataGuidance with:

Free Member

Limited Articles

Create an account to continue accessing select articles, resources, and guidance notes.

Free Trial

Unlimited Access

Start your free trial to access unlimited articles, resources, guidance notes, and workspaces.

Belgium: DPA approves BCRs for UPS and Collibra

On December 11, 2023, the Belgian Data Protection Authority (Belgian DPA) published its decisions in which it approved Binding Corporate Rules (BCRs) related to UPS Europe SRL (UPS) and Collibra Belgium BV (Collibra) for the transfer of personal data in accordance with Articles 46(1), 46(2)(b), 47(1), and 47(2) of the General Data Protection Regulation (GDPR).

The Belgian DPA highlighted that the approval of BCRs does not entail the approval of specific transfers of personal data to be carried out on the basis of the BCRs, notably for data transfers to countries that do not guarantee an equivalent level of protection afforded within the EU. However, the BCRs will not require any specific authorization from the concerned supervisory authorities.

What are the terms of the decisions approving BCRs for UPS?

The Belgian DPA approved BCRs for UPS in its activity as a controller and processor of customer data, as well as in its activity as a controller of employee data.

As a controller of customer data, the third countries to which transfers are to be made are Australia, China, Hong Kong, Indonesia, India, Japan, the Republic of South Korea, Macau, Malaysia, Mexico, New Zealand, Philippines, Singapore, Taiwan, Thailand, Turkey, United States, and Vietnam.

As a processor, the third countries are Switzerland, Turkey, the United Kingdom, the United States, and the Russian Federation.

As a controller of employee data, the concerned third countries are Australia, China, Hong Kong, Indonesia, India, Japan, the Republic of South Korea, Macau, Malaysia, Mexico, New Zealand, the Philippines, the Russian Federation, Singapore, Taiwan, Thailand, and Turkey.

What are the terms of the decisions approving BCRs for Collibra?

The Belgian DPA approved BCRs for Collibra solely in its activity as a processor. The third countries to which transfers are to be made are Australia, Canada, the United Kingdom, and the United States.

You can read the decisions relating to UPS here, here, and here, and the decision relating to Collibra here.