For companies there is the opportunity to create Binding Corporate Rules (BCRs) for the purpose of data transfers outside the EU or EEA. These apply group-wide but must still be approved by the relevant supervisory authority. BCRs as a transfer mechanism can also serve as a guarantee for data transfers to countries outside the EU or EEA in accordance with the GDPR.