Print this page



The Article 29 Working Party (WP29), at the April plenary meeting, examined certain critical matters with regards to the implementation of the General Data Protection Regulation (GDPR) and of the Privacy Shield and adopted several key documents such as an opinion on the draft e-privacy regulation and guidelines on data portability, data protection officers, lead authority and data protection impact assessment.
Read more

International transfers of personal data

The CNPD approves the BCR of Rakuten


The Rakuten Group has adopted Binding Corporate Rules, which define its global data protection policy with regard to international transfers of personal data. The purpose of these rules is to ensure that the same level of protection as in the European Union is provided to employees and clients of Rakuten when their personal data are transferred to entities within the same group located outside of the EU.
Read more


In the context of the Data Protection Day, the CNPD publishes three animated videos on the future General Data Protection Regulation and launches a complaint form. The goal of this day is to raise awareness on data protection and inform citizens of their rights and of good practices, thereby enabling them to exercise these rights more effectively.
Read more

European data protection authorities

The WP 29 adopts EU-US Privacy Shield FAQs for Individuals and companies


At the December plenary, the WP29 had the opportunity to further define the implementation of the Privacy Shield. To this end, the WP29 adopted specific communication tools for both individuals and companies. These tools can be used by each national Data Protection Authority (DPA) as a basis for their own communication.
Read more


As part of the Digital Lëtzebuerg initiative, the CNPD and the Ministry of State (SMC) organize a series of events specially designed to present the new General Data Protection Regulation and to guide you through its implementation. After a conference on 11 October where the main changes of the regulation were presented, specialized informations sessions are organised from 14 to 16 November 2016 according to the line of business.
Read more

Xavier Bettel, Premier ministre, ministre des Communications et des Médias

On 11 October 2016,the CNPD and the media and communications department (Service des médias et des communications - SMC) organised a conference on the main changes introduced by the new general data protection regulation. This conference marked the start of a series of events specially devised as part of the ‘Digital Lëtzebuerg’ initiative to present the new regulation to the various stakeholders and to guide them through its implementation. Before an audience of more than 500 people at the Maison du Savoir in Esch-Belval, Prime Minister and Minister for Communications and Media Xavier Bettel spoke of the challenges and opportunities of the new European regulation for the Grand Duchy.
Read more

All news



National Commission for Data Protection

1, avenue du Rock’n’Roll
L-4361 Esch-sur-Alzette

Tel.: (+352) 26 10 60-1
Fax: (+352) 26 10 60-29

E-mail contact

Submit a complaint


General Data Protection Regulation


Thematic dossier





Agenda / Key dates


Recent opinions


Article 29 Working Party


Introduction to data protection

The 10 commandments of data protection

Data protection: What is it about?


Public register






Data security

Data security