Filter the results
-
Publication of the annual report 2019
Publication of the annual report 2019 2019 was the first full year that the CNPD worked under the General Data Protection Regulation[1] (GDPR) and the
-
EDPB adopts recommendations on supplementary measures following Schrems II
Over the last weeks the CNPD together with the data protection authorities of the EU member states have elaborated within the European Data Protection Board (EDPB) recommendations on measures that supplement transfer tools to ensure compliance with GDPR.
-
39th Plenary Session of the EDPB
39th Plenary Session of the EDPB
-
The EDPB adopts guidelines on the concepts of controller and processor in the GDPR and on the targeting of social media users
The Board adopted Guidelines on the concepts of controller and processor in the GDPR and Guidelines on the targeting of social media users.
-
38th Plenary Session of the EDPB
38th Plenary Session of the EDPB
-
2. Transfers towards a country outside the European Economic Area with an adequate level of protection
Any controller wishing to transfer personal data outside the EEA must first ensure that the country of destination offers an adequate level of protection. If the level of protection of the destination country can be considered adequate, the personal data...
-
International data transfers: CNPD statement following invalidation of “Privacy Shield”
The Luxembourg Data Protection Authority (CNPD) welcomes the judgement from the Court of Justice of the European Union (CJEU) in the case Data Protection Commissioner v Facebook Ireland and Maximillian Schrems (Schrems II), rendered on July 16, 2020.
-
EDPB publishes new register containing One-Stop-Shop decisions
The EDPB has published a new register containing decisions taken by national supervisory authorities following the One-Stop-Shop cooperation procedure (Art. 60 GDPR) on its website.
-
Commission report: EU data protection rules empower citizens and are fit for the digital age
Today, just over two years after its entry into application, the European Commission published an evaluation report on the General Data Protection Regulation (GDPR).
-
The CNPD has a new address!
From Monday, 8 June 2020, the offices of the National Commission for Data Protection (CNPD) are transferred to the Naos building in Belval.
-
Processing of personal data in the context of the coronavirus (Covid-19)
The European Union is currently experiencing a wide-ranging health crisis due to the coronavirus (Covid-19). In this context, Luxembourg's private and public entities are facing complex challenges in their daily operations. This thematic dossier compiles the recommendations and declarations of the CNPD, the EDPB (European Data Protection Board) and other bodies.
-
EDPB adopts further COVID-19 guidance
During its 23rd plenary session, the EDPB adopted guidelines on the processing of health data for research purposes in the context of the COVID-19 outbreak and guidelines on geolocation and other tracing tools in the context of the COVID-19 outbreak.
-
EDPB Letter concerning the European Commission's draft Guidance on apps supporting the fight against the COVID-19 pandemic
Wednesday, 15 April, 2020 - Following a request for consultation from the European Commission, the European Data Protection Board adopted a letter concerning the European Commission's draft Guidance on apps supporting the fight against the COVID-19 pandemic.
-
CNPD’s Open Data Protection Laboratory
DaproLab for the public research sector: DPIA and identification of (co-) data controllers and processors
On March 30, the CNPD is organizing a DaProLab session (CNPD Open Data Protection Laboratory) for the public research sector on the following topics: Data Protection Impact Assessment and Identification of (co-) data controllers and processors in the context of scientific research.
-
Council of Europe: Saving lives, respecting data protection
Alessandra Pierucci, Chair of the Committee of Convention 108 and Jean-Philippe Walter, Data Protection Commissioner of the Council of Europe insist on the need for personal data to be protected even in the current situation and in the various areas where the measures taken to fight the pandemic and maintain business and education activities can put them at risk.
-
Statement of the EDPB on the processing of personal data in the context of the COVID-19 outbreak
On March 19th, the European Data Protection Board adopted a formal statement on the processing of personal data in the context of the COVID-19 outbreak via written procedure.
-
Nineteenth Plenary Session of the EDPB
Nineteenth Plenary Session of the EDPB
-
Statement by the GPA Executive Committee on the Coronavirus (COVID-19) pandemic
The Executive Committee of the Global Privacy Assembly (GPA) recognises the unprecedented challenges being faced to address the spread of Coronavirus (COVID-19).
-
Statement of the EDPB Chair on the processing of personal data in the context of the COVID-19 outbreak
Governments, public and private organisations throughout Europe are taking measures to contain and mitigate COVID-19. This can involve the processing of different types of personal data.
-
European Data Protection Board (EDPB)
Eighteenth EDPB Plenary Session
Evaluation of the GDPR; Guidelines on Art 46.2 (a) and 46.3 (b) GDPR for transfers personal data between EEA and non-EEA public authorities a bodies; Statement on privacy implications of mergers