On 12 September 2017, a highly awaited bill implementing and complementing the EU General Data Protection Regulation or GDPR (Regulation No 2016/679) was submitted to the Luxembourg Parliament.
Since the GDPR is a European regulation, its provisions will be directly applicable in Luxembourg as from 25 May 2018. However, the Member States have a number of options when it comes to implementing the GDPR. Luxembourg has made use of some of these options, in particular concerning, on the one hand, the organisation of the Luxembourg data protection authority (CNPD) and the decriminalisation of data protection law and, on the other hand, the introduction of more specific material provisions for personal data processing for journalistic, research and healthcare purposes.
Please read more on this topic in our newsletter.