GlaxoSmithKline receives approval for its Binding Corporate Rules

The ICO has approved GlaxoSmithKline’s Binding Corporate Rules (BCRs) that apply across GSK’s human resources and R&D functions meaning that the solution frees the company to transfer data outside of the EU whether it is personal information of employees, consumers, healthcare professionals, clinical trial subjects, or patients.

Mina Mehta, GSK’s Vice President and Compliance Officer, Pharmaceuticals R&D, said: “The ICO’s approval of our policies around the handling of such data is the next step in our ongoing commitment to ensuring we adopt robust privacy practices when conducting our business.”

Only some 40 companies worldwide have received approval for BCRs so far, with the ICO being one of the most sought after lead DPAs to see the process through.