Abstract

The text addresses the issue of personal data flows within groups of companies, with a particular focus on international groups, including those comprising companies incorporated in a country outside the EEA (i.e. in a third country). Attention has been focused on the practical aspects of such flows, including explanations as regards mapping of personal data processing processes in organisations, typical types of data transferred as part of intra-group transfers and the most common legal bases applicable in the analysed cases.The author refers not only to the regulations and observations concerning international personal data protection but also his experience as a lawyer advising international groups of companies and their authorities on corporate law. Hence, the text discusses not only administrative data protection law aspects but also economic and corporate conditions prevailing in the business environment.