Support Centre

EU: EDPB adopts opinions on draft decision of AEPD on controller and processor BCRs of Kumon Group

The European Data Protection Board ('EDPB') issued, on 16 February 2021, its Opinions 07/2021 and 06/2021 on the draft decision of the Spanish data protection authority ('AEPD') regarding the controller and processor Binding Corporate Rules ('BCRs') of Kumon Group. In particular, the EDPB found that the AEPD's draft decision on the controller and processor BCRs of Kumon Group can be adopted as it is, as well as noting that the draft BCRs of Kumon Group concern the collection of, transfer between, and all other processing by the Kumon Group Companies of personal data originating in the EEA, as well as that data subjects involved include franchise instructors, students studying (or interested in studying) in the Kumon program, and students' guardians. More specifically, the EDPB highlighted that the draft BCRs of Kumon Group contain appropriate safeguards for ensuring that the level of protection of natural persons guaranteed by the General Data Protection Regulation (Regulation (EU) 2016/679) ('GDPR') is not undermined when personal data will be transferred to and processed by the group members based in third countries.

You can read Opinion 07/2021 on the controller BCRs here and Opinion 06/2021 on the processor BCRs here