Latest News

  1. First plenary meeting of the EDPB

    Europe’s new data protection rules and the EDPB: giving individuals greater control

    Today the European Data Protection Board (EDPB) held its first plenary meeting. This new, independent EU decision-making-body with legal personality is created by the General Data Protection Regulation (GDPR), which enters into application as of today. The EDPB succeeds the Article 29 Working Party.
  2. Cambridge Analytica/Facebook

    WP29 establishes a Social Media Working Group

    The Working Party 29 (WP29), the group uniting European data protection authorities, announces its full support for the ongoing investigations by national privacy authorities into the collection and use of personal data by and through social media. In addition, the WP 29 will create a Social Media Working Group to develop a long-term strategy on the issue.
  3. Cambridge Analytica/Facebook

    Cambridge Analytica: reaction of the Article 29 Working Party

    “As a rule personal data cannot be used without full transparency on how it is used and with whom it is shared. This is therefore a very serious allegation with far-reaching consequences. ICO is conducting the investigation into this matter. As Chair of the Article 29 Working Party, I fully suport their investigation. The Members of the Article 29 Working Party will work together in this process."
  4. CNPD Course: 13 April 2018

    Data Protection Basics

    On 13 April 2018, the CNPD organizes new courses on the basics of data protection. These courses are aimed at “beginners”, who wish to learn basic elements of data protection law.
  5. International transfers of personal data

    The CNPD approves the BCR of PayPal

    The PayPal Group has adopted Binding Corporate Rules, which define its global data protection policy with regard to international transfers of personal data. The purpose of these rules is to ensure that the same level of protection as in the EU is provided to employees and clients of PayPal when their personal data are transferred to entities within the same group located outside of the EU.
  6. CNPD Course: 7&8 February 2018

    Data Protection Basics

    On 7 and 8 Feburary 2018, the CNPD organized courses on the basics of data protection. 200 participants were informed about the rights of data subjects, the obligations of controllers and processors and the role of the CNPD.
  7. Data Privacy Day 2018: Info session about changes to personal data rights

    In 2018 the RESTENA Foundation and the University of Luxembourg have joined forces to provide to you a couple of sessions regarding current trends, legal and practical aspects as well as technical backgrounds of data privacy and data protection. Michel Sinner of the CNPD will be one of the Keynote speakers. His presentation will be about compliance monitoring by the CNPD.
  8. GDPR Compliance Support Tool

    Launch of compliance support tool for new general data protection scheme

    The CNPD, with support from Digital Luxembourg and in conjunction with the Luxembourg Institute of Science and Technology (LIST), has developed a GDPR Compliance Support Tool. The purpose of this tool is to offer users an innovative, intuitive solution for ascertaining the level of maturity of their organisations with regard to data protection.


Commission nationale pour la protection des données

1, avenue du Rock’n’Roll
L-4361 Esch-sur-Alzette

Tel.: (+352) 26 10 60-1

Submit a complaint


Would you like to be kept up to date on the CNPD? 

General Data Protection Regulation

Agenda / Key dates

Recent opinions

Article 29 Working Party

Introduction to data protection

Public register


  • Authorization request