Information note on BCRs for companies which have ICO as BCR Lead Supervisory Authority

Information note on BCRs for companies which have ICO as BCR Lead Supervisory Authority Adopted on 12 February 2019 In the event of a No - deal Brexit and the ICO no longer has a role in the BCR community, companies are therefore invited to consider the following: • Groups headquartered in the UK wishing to apply for BCRs: such Groups should identify the most appropriate BCR Lead Supervisory Authority in a EU Member State, according to the criteria laid down in 1.2 of WP 263 . • Current Applications: Groups for which BCRs are at the review stage by the ICO need to identify a new BCR Lead Supervisory Authority according to the criteria laid down in WP263 .The new BCR Lead Supervisory Authority will take over the application and formally initiate a new procedure at the time of a no deal Brexit . Draft BCRs submitt ed to EDPB: if a draft ICO decision for approving BCRs is pending before the EDPB at the time of a No - deal Brexit, the Group needs to identify a new BCR Lead Supervisory Authority according to the criteria laid down in WP263 . The new BCR Lead will take over and re - submit a draft decision for the approval the BCRs to the EDPB. • Authorised BCR holders: BCR holders need to identify the new BCR Lead Supervisory Authority, according to the criteria laid down in WP 263 . In any of the above scenar ios, the Supervisory Authority that may be approached to act as the new BCR Lead Supervisory Authority will consider in cooperation with other concerned Supervisory Authorities whether it is the appropriate BCR Lead on a case by case basis and inform the G roup accordingly. For any questions or further information, Groups are invited to contact the ICO. For the European Data Protection Board The Chair (Andrea Jelinek)