Filter the results
-
The CNPD has a new address!
From Monday, 8 June 2020, the offices of the National Commission for Data Protection (CNPD) are transferred to the Naos building in Belval.
-
Coronavirus (COVID-19): Recommendations by the CNPD on the processing of personal data in the context of a health crisis
Actuellement, l’UE connaît une crise sanitaire exceptionnelle liée au coronavirus. Dans ce contexte, la CNPD donne des recommandations en matière de collecte de données aux acteurs privés et publics qui sont confrontés à des défis de plus en plus complexes dans leur fonctionnement quotidien.
-
The right to erasure ("Right to be forgotten")
If the retention of data concerning you is no longer justified, you may request their erasure. If the controller has no legitimate reason (e.g. legal obligations at the accounting level) that justifies the retention of your data, then they
-
European data protection authorities
Opinions and guidelines on data protection impact assessments, data portability, the DPO, the lead authority, the e-Privacy regulation and the Privacy Shield
The Article 29 Working Party (WP29), at the April plenary meeting, examined certain critical matters with regards to the implementation of the General Data Protection Regulation (GDPR) and of the Privacy Shield and adopted several key documents such as an
-
Transfer of personal data from the EU to the US
The WP29 reiterates its position on the EU – U.S. Privacy Shield draft adequacy decision
"In view of the upcoming Article 31 Committee meeting on the EU-US Privacy Shield, the Article 29 Working Party would like to reiterate its position as expressed in its April 2016 public opinion. The objective of the Working party
-
Conference on the occasion of the Data Protection Day
The challenges of the upcoming data protection regulation
In the context of the Data Protection Day, the National Commission for Data Protection, in collaboration with the APDL and Security made in Lëtzebuerg, organized a conference on the challenges ahead of the European regulation on data protection, followed by
-
News
At the moment, the English version is limited to sections that we consider to be of particular interest for our visitors. Please refer to the French or German version.
-
CNPD Course
Data Protection Basics
Description As our society collectively moves online, so businesses, public administrations, associations and other professional actors increasingly find themselves collecting, exchanging and processing personal data. And yet, the use of such data is subject to stringent rules. Processing activities such
-
From 14 to 18 November 2016
Information sessions on the new general data protection regulation
As part of the Digital Lëtzebuerg initiative, the CNPD and the Ministry of State (SMC) organized a series of events specially designed to present the new General Data Protection Regulation and to guide you through its implementation. After a conference
-
Data protection
The National Data Protection Commission (CNPD) will process your personal data in order to fulfil the tasks assigned to it by Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection...
-
Statement of the EDPB Chair on the processing of personal data in the context of the COVID-19 outbreak
Governments, public and private organisations throughout Europe are taking measures to contain and mitigate COVID-19. This can involve the processing of different types of personal data.
-
38th Plenary Session of the EDPB
38th Plenary Session of the EDPB
-
39th Plenary Session of the EDPB
39th Plenary Session of the EDPB
-
European Data Protection Board (EDPB)
Fourteenth EDPB Plenary session
On October 8th and 9th, the EEA Data Protection Authorities and the European Data Protection Supervisor, assembled in the European Data Protection Board, met for their fourteenth plenary session. During the plenary a wide range of topics were discussed.
-
Global Privacy Enforcement Network
The CNPD participates in the annual coordination meeting of GPEN
On 2 and 3 April 2014, the annual coordination meeting of the "Global Privacy Enforcement Network (GPEN)" was held in Manchester. The event brought together authorities from 34 countries and from different continents who have powers of intervention and/or
-
Transatlantic data flows
Statement by WP29 on the consequences of the Schrems judgment
On 2-3 February 2016, the Article 29 Working Party (WP29) met to discuss the consequences of the CJEU judgment in the Schrems case for international transfers. The WP29 welcomes the fact of the conclusion of the negotiations between the
-
CHAPTER IV - Controller and processor
Section 1 - General obligations Article 24 - Responsibility of the controller Article 25 - Data protection by design and by default Article 26 - Joint controllers Article 27 - Representatives of controllers or processors not established in the Union
-
Grand-Ducal Regulations
Data protection in general Data protection - electronic communications sector Grand-Ducal Regulation of 24 July 2010 (traffic and localisation data)
-
Case Law
-
About this site
About this site You are now on the official website of the "Commission nationale pour la protection des données" (CNPD). It has been set up with the