EDPB Opinion on Dutch Authority's Draft Decision for Arcadis Group

The EDPB has published Opinion 5/2026, providing its view on a draft decision from the Dutch Data Protection Authority regarding the Arcadis Group's Binding Corporate Rules (BCRs). This opinion is crucial as it relates to the international transfer of personal data and the assessment of whether these BCRs offer adequate protection under GDPR.

This document is significant for organizations seeking to implement BCRs for international data transfers. While the EDPB's opinion is non-binding on the national supervisory authority, it provides critical guidance on the interpretation and application of GDPR requirements for such transfers. Companies, particularly those in the technology sector or with complex international operations, should review this opinion to understand the EDPB's stance on BCRs and potential implications for their own data transfer mechanisms. The Dutch Authority will now consider this opinion in its final decision.