IT law

GDPR: CNPD Releases Black List of Processing Operations Subject to a Data Protection Impact Assessment (DPIA)
25/03/2019

Consequences of Brexit in the sphere of international data transfers
05/03/2019

The National Commission for Data Protection (“Commission nationale pour la protection des données”, or “CNPD”) recently published a report on the consequences of Brexit in the sphere of international data transfers. 

La technologie Blockchain à l’aune du RGPD
08/02/2019

Lors d’un panel qui s’est récemment tenu à Luxembourg sur le thème de l’art et de la finance, il a été l’occasion de revenir sur les mesures qui doivent être prises lorsque la Blockchain est utilisée pour un traitement de données personnelles.

Happy World Privacy Day 2019!
04/02/2019

The CNPD (Commission Nationale pour la Protection des données, or “CNPD”) has, until now, adopted a cooperative approach with the entities requesting guidance and has, in particular, met representatives of important sectors in Luxembourg.

Protection des données à caractère personnel et surveillance des salariés
05/12/2018

Depuis le 25 mai 2018, le Règlement (UE) 2016/679 du Parlement européen et du Conseil du 27 avril 2016 relatif à la protection des personnes physiques à l'égard du traitement des données à caractère personnel et à la libre circulation de ces données, 

CSSF Circular 18/698: impact on IT organisation and (cloud based) outsourcing for investment fund managers
03/12/2018

IT is key. This is not the slogan of an IT service provider but one of the lessons to be drawn from the CSSF Circular 18/698. Investment fund managers subject to this circular have strengthened obligations regarding their IT infrastructures, outsourcing, internal governance and data protection.

GDPR in Luxembourg : the date protection act
30/10/2018

The General Data Protection Regulation (“GDPR”) took direct effect in Luxembourg on 25 May 2018, but since it allows EU Member States latitude in specific areas, 

Respect the GDPR - prevention is better than cure
16/10/2018

On 25 May 2018, Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (GDPR) entered into force.

Monitoring at the workplace: a new legal framework in Luxembourg
15/10/2018

If the General Data Protection Regulation (GDPR) harmonizes the data protection rules across Europe, it also leaves room for EU Member States to provide for more specific provisions in certain sensitive area. 

Luxembourg Law complementing the GDPR
01/10/2018

The Regulation (EU) 2016/679  of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (“GDPR”) which entered into force in May 2018