Filter the results
-
International data transfers
International data transfers Any transfer of personal data, which are undergoing processing or which will be processed after the transfer, to a
-
EDPB adopts recommendations on supplementary measures following Schrems II
Over the last weeks the CNPD together with the data protection authorities of the EU member states have elaborated within the European Data Protection Board (EDPB) recommendations on measures that supplement transfer tools to ensure compliance with GDPR.
-
Statement of the EDPB on the processing of personal data in the context of the COVID-19 outbreak
On March 19th, the European Data Protection Board adopted a formal statement on the processing of personal data in the context of the COVID-19 outbreak via written procedure.
-
Nineteenth Plenary Session of the EDPB
Nineteenth Plenary Session of the EDPB
-
National Commission for Data Protection
Presentation of the annual report 2013
Tuesday, May 27, 2014, the National Commission for Data Protection presented its 2013 activity report at a press conference in Esch-Belval. A record number of 177 complaints or requests for verification of citizens, 26 investigations, 2054 declarations of organizations
-
10th February 2015
Safer Internet Day 2015: "Let's create a better internet together"
Safer Internet Day (SID) is organised by Insafe in February of each year to promote safer and more responsible use of online technology and mobile phones, especially amongst children and young people across the world.Safer Internet Day 2015 will
-
Save the dates
General Data Protection Regulation: conference and information sessions
As part of the Digital Lëtzebuerg initiative, the CNPD and the Ministry of State (SMC) are proud to invite you to a series of events specially designed to present the new General Data Protection Regulation and to guide you through its implementation. A conference, which will be held on the 11th October 2016, will aim to present the main changes in the new regulation. From 14th to 18th November, specialized information sessions are organized according to the line of business.
-
Joint Supervisory Authority for Customs
The Joint Supervisory Authority (JSA) for Customs was established on the basis of Article 18 of the Convention of 26 July 1995 on the use of information technology for customs purposes. It is competent to supervise operation of the Customs Information System (CIS).
-
Global Privacy Assembly (GPA)
The Global Privacy Assembly (GPA) is a global exchange forum where 130 members share best practices and take common positions. Established in 1979, it was known as the International Conference of Data Protection and Privacy Commissioners (ICDPPC) until 2019.
-
New brochure "Your data protection obligations"
Guide for businesses, public authorities and associationsThe CNPD has published a new brochure for data controllers and processors. The goal of this publication is to inform businesses, public authorities and associations about their data protection obligations and guide them in their effort to be compliant.
-
28 January 2017: Data Protection Day
Animated videos on the future General Data Protection Regulation and new complaint form
In the context of the Data Protection Day, the CNPD publishes three animated videos on the future General Data Protection Regulation and launches a complaint form. Processing of personal data has increased exponentially with the rise of social media, cloud
-
Merry Christmas and a Happy New Year 2018
Merry Christmas and a Happy New Year 2018!
-
Data breaches (Electronic communications sector)
In accordance with European Commission Regulation (EU) No. 611/2013 of 24 June 2013, which entered into force on 25 August 2013, providers of publicly available electronic communications services, such as fixed or mobile telephone companies or Internet service providers
-
Consent
The data subject's consent is one of the conditions processing operations can be based in order to be lawful. The provisions concerning the conditions applicable to consent were further developed by the GDPR, emphasizing its "free, specific, informed
-
International Working Group on Data Protection in Telecommunications
The International Working Group on Data Protection in Telecommunications, set up in 1983, operates within the International Conference on Privacy and Personal Data Protection.
-
RegTech
New compliance tool supporting organisations with regard to the new data protection scheme
The annual general meeting of the data protection association ‘Association pour la Protection des Données au Luxembourg’ (APDL) held on 14 June 2017 provided an opportunity for the national data protection commission (Commission Nationale pour la Protection des Données - CNPD
-
Lawfulness of processing
In order to be lawful, the processing operations must be based on one of the following conditions: The data subject has consented to the processing of his/her personal data for one or more specific purposes. The processing is necessary
-
Your obligations
Since 25 May 2018, the General Data Protection Regulation imposes stricter accountability obligations on private and public actors. You will be required to constantly ensure that the rules set out in the Regulation are followed and must be able to
-
Professionals
Since 25 May 2018, the General Data Protection Regulation (EU) 2016/679 (“GDPR”) is directly applicable to all organizations active on the European Union territory. The new rules impose stricter accountability obligations on private and public actors, while reducing or
-
Complaint form
Before making a complaint, we invite you to contact the data controller to assert your rights (information request, access request, deletion, ...).