According to the GDPR, what is a description of binding corporate rules (BCR)?

A decision on the safety of transferring personal data to a non-EEA country. Incorrect. This refers to

adequacy decisions.

A measure to compensate for the lack of personal data protection in a third country. Incorrect. This

refers to appropriate safeguards.

A set of agreements covering personal data transfers between non-EEA countries. Incorrect. The

GDPR does not cover agreements between non-EEA countries.

A set of approved rules on personal data protection used by a group of enterprises. Correct. BCR are

a set of rules approved by the supervisory authorities. (Literature: A, Chapter 3; GDPR Article 47)