In order to ensure a consistent level of protection for natural persons throughout the Union and to prevent divergences hampering the free movement of personal data within the internal market, a Regulation is necessary to provide legal certainty and transparency for economic operators, including micro, small and medium-sized enterprises, and to provide natural persons in all Member States with the same level of legally enforceable rights and obligations and responsibilities for controllers and processors, to ensure consistent monitori ...[+++]ng of the processing of personal data, and equivalent sanctions in all Member States as well as effective cooperation between the supervisory authorities of different Member States.

(17) ‘binding corporate rules’ means personal data protection policies which are adhered to by a controller or processor established on the territory of a Member State of the Union for transfers or a set of transfers of personal data to a controller or processor in one or more third countries within a group of undertakings;

(56) In order to ensure consistent monitoring and enforcement of this Directive throughout the Union, the supervisory authorities should have the same duties and effective powers in each Member State, including effective powers of investigation, power to access all personal data and all information necessary for the performance of each supervisory function, power to access any of the premises of the data controller or the processor including data processing requirements, and lega ...[+++]lly binding intervention, decisions and sanctions, particularly in cases of complaints from individuals, and to engage in legal proceedings.

25. Invites the Commission to clarify and substantiate the existing rules regarding relevance, need, efficiency, clarity and enforceability, as well as the powers, competence and enforcement activities of the authorities, so as to ensure that there is a single, comprehensive harmonised data protection framework in the EU providing a high and equivalent level of protection regardless of the type of data processing engaged in; calls for the revised legislation to be applicable and enforced across the EU as well as internationally, so that, once covered by EU law, personal data remain covered by EU law, regardless of any transfers of those ...[+++] data or the location of the data controller or processor, thus facilitating cross-border business without undermining the protection of individuals’ personal data;

The parties agree that on the termination of the provision of data-processing services, the data importer and the sub-processor shall, at the choice of the data exporter, return all the personal data transferred and the copies thereof to the data exporter or shall destroy all the personal data and certify to the data exporter that it has done so, unless legislation imposed upon the data importer prevents it from returning or destroying all or part of the personal data transferred.

If a data subject is not able to bring a claim against the data exporter or the data importer referred to in paragraphs 1 and 2, arising out of a breach by the sub-processor of any of their obligations referred to in Clause 3 or in Clause 11 because both the data exporter and the data importer have factually disappeared or ceased to exist in law or have become insolvent, the sub-processor agrees that the data subject may issue a claim against the data sub-processor with regard to its own processing operations under the Clauses as if it were the data exporter or the data importer, unless any successor entity has assumed the entire legal o ...[+++]bligations of the data exporter or data importer by contract or by operation of law, in which case the data subject can enforce its rights against such entity.