On 22 April 2022, the Commission de Surveillance du Secteur Financier (the "CSSF") published CSSF Circular 22/806 on outsourcing arrangements (the “Outsourcing Circular”).
On 22 April 2022, the Luxembourg financial regulator (the "CSSF") released Circular 22/806 on outsourcing arrangements (the "Circular"). By means of the Circular, the CSSF adopts and integrates the revised EBA Guidelines on outsourcing arrangements (EBA/GL/2019) (the "EBA Guidelines")
On 25 March 2022, the European Commission and the United States announced agreement in principle on a new Trans-Atlantic Data Privacy Framework. This will be welcome news to businesses on both sides of the Atlantic but has some way to go before it becomes a reality.
The Law of 17 December 2021 on electronic communications networks and services ("Law") was published on 22 December 2021 and came into force on 26 December 2021
On the 10th January 2022, Luxembourg’s government introduced a draft law n° 7945 (the “Draft law”) transposing the Directive (EU) 2019/1937 of the European Parliament and of the Council of 23 October 2019 on the protection of persons
On 29 November 2021, the Commission de surveillance du Secteur Financier (the “CSSF”) published a Communiqué entitled “CSSF guidance on virtual assets” as well as an FAQ on “Virtual Assets” which were recently updated on 4 January 2022
A few months ago, the Irish Data Protection Commission imposed an administrative fine of EUR 225 million on WhatsApp Ireland Limited, declaring the company's data protection notice non-compliant with the General Data Protection Regulation (Regulation (No) 2016/679 or the "GDPR").
The Luxembourg Data Protection Authority (the ‘Commission Nationale pour la Protection des Données’, or ‘CNPD’) has published updated guidelines on cookies and other trackers, including “fingerprinting", "web beacons" or "shared objects".
Not in the automotive sector? It doesn't matter: two Regulations adopted by UNECE (a United Nations body) on cybersecurity and software updates in the automotive sector may shape your products and services – even if your sector is completely different.
On 14 October 2021, the CSSF published its new CSSF Circular 21/785 with regard to replacing the prior authorisation obligation with a prior notification obligation in the case of material IT outsourcing (the “Circular”)
.png)
