What does the GDPR concept of ‘binding corporate rules’ (BGR) imply?
A. A commission decision on the safety of data transfer to a third country
B. A set of rules used by a group of enterprises concerning personal data protection in international transfers
C. Measures to compensate for the lack of data protection in a third country
D. Rules covering data transfers between third countries