The Spanish Data Protection Agency (AEPD) has approved on March 8 2024 the Binding Corporate Rules (BCRs) of the Telefónica Group. In order to obtain this approval, the consistency mechanism regulated by art. 63 of the European Data Protection Regulation (GDPR) has been followed, in which the European national data protection authorities and the European Data Protection Board (EDPB) have participated.
In accordance with art. 46 of the GDPR, the BCRs constitute an adequate guarantee for the international transfer of personal data between companies of the same group, in such a way that the approved BCRs enable the international transfer of data from Telefónica Group companies located in the European Economic Area to Group companies located outside the European Economic Area.
Telefónica’s BCRs: Commitment to good governance and privacy
The BCRs represent a commitment and a guarantee of good privacy governance within the Group. It is this guarantee of good privacy governance provided by the Telefónica Group’s BCRs that enables the international transfer of data between its companies.
But beyond international international transfers, the BCRs are undoubtedly another instrument that strengthens good governance and confirms Telefónica’s solid foundations and commitment to the privacy of its customers, employees and suppliers.
This solidity in the foundations of privacy has been recognised year after year in the sustainability indicators obtained by the Telefónica Group privacy governance in the most important rankings and analysts.
The approval of the BCRs is an undeniable boost to the path we have taken, where respect for fundamental rights and public freedoms in the processing of personal data of customers, employees, suppliers and users is not only compatible with the innovation but also promotes quality technological progress.
Fostering technological responsibility at Telefónica
At Telefónica, the progress that technology brings us is only progress if it is progress for people and for society as a whole. For this reason, at Telefónica we read the approval of the BCRs in a broader conceptual framework, linked to a commitment to responsible technology, as represented by the recently approved internal governance of Artificial Intelligence in the Telefónica Group, in which we have been pioneers.
With regard to the international movement of data, at Telefónica we have promoted the convergence of data protection regulations as the best way to ensure that personal data transferred is properly protected, regardless of its location. For this reason, we promote the development of data protection regulations in all the countries in which we operate and seek recognition of their adequacy by the European authorities.
The secure movement of data is essential for the social, cultural and economic development of our societies, and it is in this area of action and commitment that the Telefónica Group’s Binding Corporate Rules are formulated.
