Regulatory Watch  /  Jurisdictions  /  European Union  /  Luxembourg

LUXEMBOURG

Regulators: CNPD

⚖️ Latest developments 🌐 Jurisdictions 📚 Law library
Laws that apply here
Also applies: European Union
Cyber Resilience Act Cyber Date not recorded Data Act Data governance In force since Sep 2025 Data Governance Act Data governance In force since Sep 2023 Digital Markets Act Platforms In force since May 2023 Digital Services Act Platforms In force since Feb 2024 ePrivacy Directive Privacy Date not recorded EU AI Act AI In force since Aug 2024 EU-U.S. Data Privacy Framework Transfers Date not recorded European Health Data Space Health Date not recorded General Data Protection Regulation Privacy In force since May 2018 Law Enforcement Directive Privacy In force since May 2018 NIS2 Directive Cyber In force since Oct 2024 Regulation (EU) 2018/1725 Privacy In force since Dec 2018 Standard Contractual Clauses Transfers Date not recorded
Developments
Low Enforcement Filed Luxembourg · Dec 22, 2021
noyb files complaint with Luxembourg CNPD over Amazon's automated e-recruiting decisions
noyb lodged a complaint with the Luxembourg data protection authority (CNPD) against Amazon for using automated decision‑making in its Mechanical Turk recruitment process. The complainant was denied access without explanation, and Amazon…
Commission Nationale pour la Protection des Données (CNPD) · General Data Protection Regulation
Low Enforcement Filed Luxembourg · Oct 21, 2021
noyb files GDPR complaint against Amazon Europe over opaque automated payment decisions
noyb lodged a complaint with Luxembourg's data protection authority alleging that Amazon Europe's automated "Monthly Invoice" payment rejections violate GDPR transparency and access requirements. The complaint cites the lack of explanation…
Luxembourg National Data Protection Commission · General Data Protection Regulation
Moderate Court ruling Decided Luxembourg · Jan 25, 2021
Luxembourg administrative tribunal rules CNPD must handle GDPR complaints against US controllers
The Luxembourg administrative tribunal found that the CNPD wrongly dismissed complaints against US‑based data controllers Apollo and RocketReach and ordered the DPA to reopen the cases. The decision follows earlier appeals by privacy NGO…
Commission Nationale pour la Protection des Données (CNPD) · General Data Protection Regulation
Coming up
No stated dates ahead.