The CNPD today presented its 2025 Annual Report. In a context marked by the rise of artificial intelligence, new European responsibilities and sustained activity, the CNPD continued its commitment to ensuring effective protection of personal data for citizens, businesses and public authorities.
Activity increased significantly
In 2025, the CNPD confirmed its central role in Luxembourg’s digital ecosystem. The authority received 846 complaints, an increase of 40% compared with 2024, bringing the total number of complaints handled to 1,909 for the year. It answered 623 written enquiries, organised 36 training sessions, processed 425 personal data breach notifications and conducted 59 investigation cases.
Complaints mainly concerned the right of access (25%), the right to erasure (22%) and lawfulness/compliance of processing (21%). Data breaches were mainly caused by human error (49%), but also by cyberattacks and disclosures to unauthorised recipients.
The CNPD also adopted 16 opinions on draft laws and regulations, particularly in the areas of artificial intelligence, the Data Governance Act and electronic communications.
According to CNPD Chair Tine A. Larsen: “The 2025 figures show that data protection has become an everyday issue. Our role is to provide guidance, legal certainty and trust in a constantly evolving digital environment.”
Supporting innovation
Artificial intelligence was a major focus of the CNPD’s work in 2025. The authority continued its awareness-raising and dialogue initiatives, notably through Re.M.I. – Regulation Meets Innovation, while taking on its new responsibilities under the Data Governance Act.
The CNPD also continued developing compliance tools, with the approval of Luxembourg’s first sectoral GDPR Code of Conduct and further work on certification.
Commissioner Alain Herrmann: “Data protection is a driver of trust and therefore of innovation. Our objective is to help organisations integrate these requirements from the design stage of their projects.”
Strengthening the data protection culture
The CNPD continued awareness activities for different audiences, notably through the creation of the Digital Literacy Service, the development of the Leonora project for young people and the organisation of workshops and conferences.
Commissioner Thierry Lallemang: “Data protection must be taken into account from the design stage of projects. The CNPD supports this approach through independent legal expertise.”
A forward-looking authority
2025 also saw strengthened teams, the creation of a Knowledge Management service and the appointment of Florent Kling as a new Commissioner.
Florent Kling: “Artificial intelligence, increasing data exchanges and new European legislation are profoundly reshaping the regulatory landscape. The challenge is to ensure effective protection of personal data while enabling innovation.”
These developments enable the CNPD to continue fulfilling its missions with a high level of expertise, independence and quality.
