Otis Obtains European Union Binding Corporate Rules Certification

Earlier this month, regulators from the European Union (EU) concluded a detailed review of Otis’ processes for transferring personal data within the company. Following the rigorous assessment, an EU Binding Corporate Rules (BCR) certification was granted, marking a milestone that relatively few companies worldwide have achieved. 

“This BCR certification validates our existing processes for transferring personal data are best in class,” explains Diane Andrews, Otis’ Chief Privacy Counsel, who guided the company through the BCR process. “The certification streamlines our approach to intercompany transfers and importantly, signals to our colleagues, customers and external stakeholders that we are deeply committed to protecting personal information that is entrusted to us.” 

BCRs were developed by the European Union Article 29 Working Party (now the European Data Protection Board) to recognize multinational corporations committed to strict privacy compliance programs. BCRs allow international companies to easily transfer personally identifiable information (PII) across national borders between and among entities of the same corporate group without the need for a complex web of intercompany agreements. 

Over the course of the more than two year BCR journey, Andrews faced a multitude of legal obstacles, including new obligations arising from the EU’s General Data Protection Regulation (GDPR), as well as major court decisions that affected certain guiding principles that had to be reflected in the BCRs – all during an uncertain pandemic environment due to COVID. The approval process also required Otis to submit its entire privacy compliance program to the European Supervisory Authorities to be scrutinized.

“Throughout the process, they questioned and challenged our assumptions and controls, and even asked us to change or expand certain aspects of our program,” said Andrews. “All items needed to be resolved before gaining full approval.”

The end result was worth the effort.

“BCR status aligns with the Otis Absolutes, the set of core values that guide every Otis employee in daily decisions, said Andrews. “We did this because we care.”