Following its participation in the European coordinated action (Coordinated Enforcement Framework, or “CEF”) on the right of access in 2024 and on the right to erasure in 2025 , the CNPD is launching this year a survey on the transparency and information obligations set out in the GDPR.
To better understand how these obligations are implemented in practice, the CNPD has contacted several organisations established in Luxembourg and sent them a questionnaire on this topic.
The results of the joint initiative will be analysed in a coordinated manner and aggregated to obtain more in‑depth insights on the subject. Each participating authority will compile its results, and the EDPB (European Data Protection Board) will publish a consolidated report presenting relevant conclusions drawn from the questionnaire and offering recommendations for organisations.
Context
During its plenary meeting in October 2025, the EDPB selected transparency and information obligations as the topic of its fifth coordinated action . The GDPR ensures that individuals are informed when their data is processed (under Articles 12, 13 and 14). This right to information is a fundamental element of transparency and enables individuals to better control their data. This year, 25 data protection authorities from the EEA (European economic area) are participating in this initiative on the transparency and information obligations.
The initiative is part of the EDPB’s Coordinated Enforcement Framework. The aim of these frameworks is to promote compliance, enable individuals to exercise their rights, raise awareness, and increase the knowledge of data protection authorities.