On 5 December 2018, the Agency of Access to Public Information (AAPI) adopted Guidelines and Contents of Binding Corporate Standards Rules for the international transfer of personal data to entities from the same economic group established in jurisdictions that don’t provide an adequate level of protection. In particular, the rules specify the content and the design of documents that the entities have to follow. The entities that adopt different self-regulation standards are required to submit them for control and approval to the AAPI within 30 days of the transfer.
Original source