Wednesday, Oct 14, 2026 The claims desk. Receipts included. POWERED BY LENZ ↗
IsThis

Regulation (EU) 2016/679 governs employee-data transfers to parent companies within its scope.

The Claim

Employee records transferred to a parent company are governed by Directive (EU) 2016/679.

Verified by Lenz ·

The Short Version

The claim materially misidentifies the governing EU legal instrument: 2016/679 is a Regulation, not a Directive. Official EU legislation identifies Regulation (EU) 2016/679 as the GDPR, and European Data Protection Board guidance confirms that it governs employee-data transfers to a parent company when they fall within its scope. The underlying data-protection point holds in that setting, but the stated legal designation is wrong.

Caveats

  • The claim gives no jurisdictional details establishing that a particular transfer falls within the EU GDPR’s scope.
  • Transfers to a parent company outside the EU may trigger additional GDPR international-transfer requirements.
  • Several listed sources reproduce the same legislation; UK GDPR versions should not be substituted for the EU text.

The Receipts

  1. REGULATIONS

    legislation.gov.uk

  2. Guidelines 05/2021 on the Interplay between the application of Article 3 and the provisions on international transfers as per Chapter V of the GDPR

    edpb.europa.eu

  3. Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (United Kingdom General Data Protection Regulation) (Text with EEA relevance)

    legislation.gov.uk

  4. Consolidated TEXT: 32016R0679 — EN — 04.05.2016

    eur-lex.europa.eu

  5. L_2016119EN.01000101.xml

    web.archive.org

  6. Hauptpersonalrat der Lehrerinnen und Lehrer

    eur-lex.europa.eu

  7. Opinion 22/2023 on the draft decision of the Belgian Supervisory Authority regarding the Controller Binding Corporate Rules for employee data of the UPS Group

    edpb.europa.eu

  8. Subject: approval decision of the UPS Controller Binding Corporate Rules for employee data by the General Secretariat of the Belgian Data Protection Authority (DOS-2023- 03967)

    dataprotectionauthority.be

  9. Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (Text with EEA relevance)

    legislation.gov.uk

  10. General Data Protection Regulation (EU) 2016/679

    legislation.gov.uk

+ 24 more sources — see the full list on Lenz

Filed Under

Directive (EU) 2016/679European Union

More Fact Checks