LU-DPA-2018
Law of 1 August 2018 Organising the CNPD and Implementing the GDPR
National Commission for Data Protection
🇱🇺Luxembourg
Skin
Luxembourg overview
Luxembourg has a national GDPR overlay
The GDPR applies directly, but it leaves Member States choices in areas such as children, employment, sensitive data, research, freedom of expression, public-sector processing and supervisory procedure. Luxembourg uses its national law to exercise those choices.
National law
LU-DPA-2018: Law of 1 August 2018
What to assess
Start with the GDPR baseline, then assess the national provisions concerning expression, research safeguards, genetic data, professional secrecy and workplace surveillance. Apply sector legislation and regulator measures where the national law refers to them.
Compliance method
Use the country-specific law page and controls as a delta layer. Retain the current official text, an applicability decision and evidence for every national rule implemented.