The European Data Protection Board (EDPB) has laid down its perspective on a draft decision by the Dutch Supervisory Authority concerning the Binding Corporate Rules (BCRs) of AkzoNobel, the multinational coatings giant. Published on February 5, 2026, this Opinion sheds light on the regulatory scrutiny applied to AkzoNobel's internal data governance, particularly its international data transfer protocols. This development is poised to stir the interests and concerns of multinational corporations, national data protection authorities, consumer privacy advocates, and international regulators.
This Opinion, formally titled "Opinion 2/2026 on the draft decision of the Dutch Supervisory Authority regarding the Controller Binding Corporate Rules of the AkzoNobel Group," is a product of the EDPB's supervisory function under Article 64 of the GDPR. The document is an advisory opinion, giving the EDPB’s stance on an administrative draft decision by national authorities concerning the approval and enforcement of BCRs.
Rather than introducing new legislation, this document serves as a critical policy opinion. It does not include prescriptive rules, fixed deadlines, or budgeting specifics but evaluates the adequacy and compliance of AkzoNobel's BCRs with GDPR standards. The Opinion focuses on ensuring robust data protection safeguards for international transfers within the conglomerate, balancing regulatory oversight and corporate operational freedom.
The policy direction reaffirms the strengthening of EU oversight over multinational corporate data transfers, promoting enhanced transparency and accountability in internal data governance structures. It underscores the continuing EU inclination towards tighter supervision and harmonization of cross-border data flows, potentially intensifying regulatory compliance demands on global corporates. This reflects a tension between the goal of rigorous data protection and the operational flexibility sought by business actors.
Stakeholders impacted include AkzoNobel as the primary business entity facing operational compliance evaluation and possible adjustment costs. The Dutch Supervisory Authority and other national data protection bodies see their regulatory prerogatives reinforced, with increased coordination under EU frameworks. EU consumers stand to benefit from reinforced privacy protections in transnational data usage scenarios. Conversely, multinational enterprises might perceive the Opinion as introducing heavier administrative burdens and potentially limiting the agility of international data processing.
This EDPB Opinion is an intermediate step in the EU’s ongoing regulatory dialogue between national authorities and the European oversight body on corporate data protection measures. It is expected that the Dutch Supervisory Authority will consider the EDPB’s views before finalising its decision on AkzoNobel’s Binding Corporate Rules. The European Commission and other EU data protection authorities will likely monitor the outcome, as these rulings shape the broader regulatory landscape governing international corporate data transfers.
← Atlas › News