The privacy binding corporate rules from data controller to processors (BCRs) grant a major tool to outsourcing and cloud projects relying on data transfers.