EDPB Opinion on Dutch Authority's BCD Travel BCR

The European Data Protection Board (EDPB) has published Opinion 7/2026, evaluating a draft decision from the Dutch Supervisory Authority concerning the Binding Corporate Rules (BCRs) of BCD Travel Group. This opinion focuses on the adequacy of BCD Travel's BCRs for international data transfers, a critical aspect of GDPR compliance for multinational organizations.

Companies, particularly those involved in international data transfers and utilizing BCRs, should review this opinion to understand the EDPB's assessment criteria and potential implications for their own data transfer mechanisms. While this is an opinion on a specific case, it provides insight into the EDPB's interpretation of GDPR requirements for BCRs and international data flows, which may influence future supervisory authority decisions and compliance expectations.