News

During its plenary session on 4th June, the EDPB adopted final versions of the Guidelines on Codes of Conduct, the annex to the Guidelines on Accreditation and the annex to the Guidelines on Certification.

The CNPD has published the English and German versions of the Act of 1 August 2018 on the organisation of the National Data Protection Commission and the general data protection framework.

Just a few days short of the GDPR’s first anniversary, the European Data Protection Board surveyed the Supervisory Authorities (SAs) of the EEA and takes stock of the Board’s achievements.

Following a request from the European Commission (DG SANTE), the European Data Protection Board has adopted an opinion on the clinical trials Q&A. The opinion addresses in particular the aspects related to the adequate legal bases in the context of clinical trials, and the secondary uses of clinical trial data for scientific purposes. The opinion will now be transmitted to the European Commission.

Several organisations informed the CNPD that they had been contacted by private companies offering data protection consulting and audit services, stating that these services were allegedly executed under the mandate or on behalf of the CNPD. The CNPD hereby clarifies

Several organisations have contacted the CNPD following the receipt of a request for access that seemed dubious. The CNPD immediately contacted the GovCert to check whether it is a legitimate email or a phishing attempt. It has indeed been confirmed that the demand that has come from the domain "electronicprivacy.eu" is classified as phishing.

On 23 October 2018, the CNPD organizes new courses on the basics of data protection. These courses are aimed at “beginners”, who wish to learn basic elements of data protection law.

On 4 September 2018, the CNPD organizes new courses on the basics of data protection. These courses are aimed at “beginners”, who wish to learn basic elements of data protection law.

Today the European Data Protection Board (EDPB) held its first plenary meeting. This new, independent EU decision-making-body with legal personality is created by the General Data Protection Regulation (GDPR), which enters into application as of today. The EDPB succeeds the Article 29 Working Party.

The Working Party 29 (WP29), the group uniting European data protection authorities, announces its full support for the ongoing investigations by national privacy authorities into the collection and use of personal data by and through social media. In addition, the WP 29 will create a Social Media Working Group to develop a long-term strategy on the issue.

“As a rule personal data cannot be used without full transparency on how it is used and with whom it is shared. This is therefore a very serious allegation with far-reaching consequences. ICO is conducting the investigation into this matter. As Chair of the Article 29 Working Party, I fully suport their investigation. The Members of the Article 29 Working Party will work together in this process."

On 13 April 2018, the CNPD organizes new courses on the basics of data protection. These courses are aimed at “beginners”, who wish to learn basic elements of data protection law.

The PayPal Group has adopted Binding Corporate Rules, which define its global data protection policy with regard to international transfers of personal data. The purpose of these rules is to ensure that the same level of protection as in the EU is provided to employees and clients of PayPal when their personal data are transferred to entities within the same group located outside of the EU.

On 7 and 8 Feburary 2018, the CNPD organized courses on the basics of data protection. 200 participants were informed about the rights of data subjects, the obligations of controllers and processors and the role of the CNPD.

In 2018 the RESTENA Foundation and the University of Luxembourg have joined forces to provide to you a couple of sessions regarding current trends, legal and practical aspects as well as technical backgrounds of data privacy and data protection. Michel Sinner of the CNPD will be one of the Keynote speakers. His presentation will be about compliance monitoring by the CNPD.

Merry Christmas and a Happy New Year 2018!

On 7 and 8 Febrary 2018, the CNPD organizes new courses on the basics of data protection. These courses are aimed at “beginners”, who wish to learn basic elements of data protection law.

The CNPD has published a new brochure for data controllers and processors. The goal of this publication is to inform businesses, public authorities and associations about their data protection obligations and guide them in their effort to be compliant.

On the 18th and 19th October 2017, the CNPD organized two Information sessions about the General Data Protection Regulation. Nearly 500 representatives of companies, public administrations and associations attended these events. DESCRIPTION The General Data Protection Regulation will be applicable

The annual general meeting of the data protection association ‘Association pour la Protection des Données au Luxembourg’ (APDL) held on 14 June 2017 provided an opportunity for the national data protection commission (Commission Nationale pour la Protection des Données - CNPD