Filter the results
-
European Data Protection Board (EDPB)
Seventeenth Plenary Session of the EDPB
Art. 64 Opinions on Accreditation Requirements for Codes of Conduct Monitoring Bodies (BE, ES, FR SA), Guidelines on Connected Vehicles, Guidelines on Processing of Personal Data through Video Devices, Art. 64 Opinions on Accreditation Requirements for Certification Bodies (LU, UK), Art. 64 Opinion on Fujikura Automotive Europe Group Controller BCRs, Letter on unfair algorithms.
-
28 January 2020: Data Protection Day
Data Privacy Day - Take control of your privacy
On 28 January 2020, the CNPD participated in the Data Privacy Day, which is an annual event organized by the Restena Foundation and the University of Luxembourg in the framework of the Data Protection Day.
-
Merry Christmas and a Happy New Year
Merry Christmas and a Happy New Year!
-
European Data Protection Board (EDPB)
Sixteenth EDPB Plenary Session
On December 2nd and 3rd, the EEA Data Protection Authorities and the European Data Protection Supervisor, assembled in the European Data Protection Board, met for their sixteenth plenary session. During the plenary, several topics were discussed.
-
European Data Protection Board (EDPB)
Fifteenth EDPB Plenary session
During the fifteenth plenary session, a wide range of topics was discussed: Privacy Shield Review, Guidelines on Territorial Scope, Guidelines on Data Protection by Design & Default, Art. 64 Opinion on Exxon Mobil BCRs, Response letter to LIBE, Additional Protocol Budapest Convention.
-
From 21 to 24 October in Tirana (Albania)
International Conference of Data Protection and Privacy Commissioners
The 41st International Conference of Data Protection and Privacy Commissioners took place in Tirana (Albania) from 21 to 24 October 2019.. The theme of the conference was "Convergence and connectivity: raising global data protection standards in the digital age".
-
European Data Protection Board (EDPB)
Fourteenth EDPB Plenary session
On October 8th and 9th, the EEA Data Protection Authorities and the European Data Protection Supervisor, assembled in the European Data Protection Board, met for their fourteenth plenary session. During the plenary a wide range of topics were discussed.
-
A record number of inquiries and complaints
Publication of the 2018 annual report
The CNPD has presented its annual report with key figures for the year 2018 today at a press conference in Esch/Belval. The entry into force of the GDPR in 2018 has been accompanied by an increased awareness among professionals and individuals about data protection challenges and issues and has led to a significant increase in inquiries.
-
Sample letter by the CNPD
Exercise your right of access to the processing of personal data in criminal matters or national security matters
You have a right of access to the processing of personal data by the Police, the State Intelligence Service, the National Security Authority, the Army, the Financial Intelligence Unit and the Customs and Excise Administration.
-
First year of application of the EU General Data Protection Regulation
Special Eurobarometer survey on data protection
The European Commission published the results of a special Eurobarometer survey on data protection. The results show that Europeans are relatively well aware of the new data protection rules, their rights and the existence of national data protection authorities, to whom they can turn for help when their rights are violated.
-
European Data Protection Board
Guidelines on Codes of Conduct, annex to the Guidelines on Accreditation, annex to the Guidelines on Certification
During its plenary session on 4th June, the EDPB adopted final versions of the Guidelines on Codes of Conduct, the annex to the Guidelines on Accreditation and the annex to the Guidelines on Certification.
-
Act of 1 August 2018 on the organisation of the National Data Protection Commission and the general data protection framework
The English and German versions of the national data protection law have been published
The CNPD has published the English and German versions of the Act of 1 August 2018 on the organisation of the National Data Protection Commission and the general data protection framework.
-
European Data Protection Board
1 year GDPR – taking stock
Just a few days short of the GDPR’s first anniversary, the European Data Protection Board surveyed the Supervisory Authorities (SAs) of the EEA and takes stock of the Board’s achievements.
-
Contact
-
The EDPB adopted its opinion on the clinical trials Q&A
Following a request from the European Commission (DG SANTE), the European Data Protection Board has adopted an opinion on the clinical trials Q&A. The opinion addresses in particular the aspects related to the adequate legal bases in the context of clinical trials, and the secondary uses of clinical trial data for scientific purposes. The opinion will now be transmitted to the European Commission.
-
3.5. Derogations for specific situations
Derogations under Article 49 are exemptions from the general principle that personal data may only be transferred to third countries if an adequate level of protection is provided for in the third country or if appropriate safeguards have been adduced
-
International data transfers
International data transfers Any transfer of personal data, which are undergoing processing or which will be processed after the transfer, to a
-
3.1. Contractual clauses
Data exporters can use a series of appropriate safeguards enabling transfers to countries not offering an adequate level of protection. One of these safeguards is the possibility for controllers to offer adequate protection through a contract, which is binding for...
-
3.2. Binding Corporate Rules (“BCRs”)
Binding Corporate Rules ("BCRs") help ensure an adequate level of protection for data exchanged within a group of companies located both inside and outside the European Economic Area, and are ideal for a multinational group of companies that carries out...
-
3.3. Codes of conduct and certification mechanisms
Since the entry into force of the GDPR on 25 May 2018, new transfer mechanisms are available to controllers or processors, who intend to transfer personal data to a third country with no adequate level of protection. These are: approved
