Binding Corporate Rules (‘BCRs’) are the internal data protection policies of multinational companies (‘MNCs’) that do business both within and outside the EEA. This paper addresses the strengths and weaknesses of BCR ...