Request to the HDPA for approval of Binding Corporate Rules (BCR)

The controller or processor with an establishment in Greece may submit a request to the HDPA for approval of Binding Corporate Rules (BCR) under Article 47 GDPR and if the HDPA meets the criteria of the lead supervisory authority set out in WP 263. To do this, you must fill in a special form and submit it electronically through the HDPA online portal.

The above electronic submission consists, in short, of the following steps:

The controller or processor must:

  1. Log in to the HDPA online portal under the option “Body”, using the credentials he/she has for taxisnet.
  2. Fill in the required fields of the electronic form “Request (for other uses)”.
  3. Fill in the category of request in the above electronic form by selecting the option “5.Application for approval of binding corporate rules (BCR - Art. 47)”.
  4. Attach one or more separate files to the above electronic form (preferably in word format) in connection with the following:
    1. the text of the binding corporate rules for approval, with all its annexes;
    2. the standard WP 264 application completed (WP 265 for BCRs for processors); and
    3. the table in WP 256 (WP 257 for BCRs for processors), supplemented by references to the paragraphs of the BCRs.

    Please note that the applicant may first submit only the first part of the WP 264 or WP 265 application and then, if the cooperation procedure ensures that the Authority is the lead supervisory authority for the BCRs to be approved, submit the second part of the WP 264 or WP 265 application and the other documents.

    In order for the Greek Authority to approve the BCRs, the BCR draft must also be submitted in Greek.

  5. Submit the electronic form with all required attachments.

 

Exceptionally submit a request for approval of binding corporate rules to the HDPA by e-mail

In case that, for any substantiated reason, you cannot log in to the HDPA online portal, you can submit the above request by e-mail. Please note, however, that you can only use this way as an exception, i.e. an alternative to submitting the relevant request to the HDPA.

In this case, follow the steps outlined below:

  1. Fill in all required fields in the following controller/processor/body request form.

Controller/processor/body application form (docx / pdf).

 

  1. Fill in the category of request in the above form by selecting the option “5.Application for approval of binding corporate rules (BCR - Art. 47)”.
  2. Send an e-mail to contact@dpa.gr with subject “Submission of a request to the HDPA for approval of binding corporate rules (BCR)”, attaching the following:
    1. The above form filled in.
    2. One or more separate files (preferably in word format) in connection with the following:
      1. the text of the binding corporate rules for adoption, with all its annexes;
      2. the standard WP 264 application completed (WP 265 for BCRs for processors); and
      3. the table in WP 256 (WP 257 for BCRs for processors), supplemented by references to the BCR paragraphs.

      Please note that the applicant may first submit only the first part of the WP 264 or WP 265 application and then, if the cooperation procedure ensures that the HDPA is the lead supervisory authority for the BCRs to be approved, submit the second part of the WP 264 or WP 265 application and the other documents.

      In order for the Greek Authority to approve the BCRs, the BCR draft must also be submitted in Greek.

    3. An outline of the reasons that have led you to submit the above request in this way rather than through the HDPA online portal.