On 27 March 2019, the CSSF issued Circular 19/714 ("Circular") which amends CSSF Circular 17/654 on IT outsourcing relying on a cloud computing infrastructure (CSSF Circular 17/654 as amended by the Circular is referred to as the "Cloud Computing Circular").
La PropTech se définit comme la transformation du secteur de l’immobilier via des startups aux solutions innovantes (big data, objects connectés, dématérialisation, VR etc..
Further to Article 35(4) and (6) GDPR, the competent supervisory authority, i.e. the CNPD in Luxembourg, must establish a list of the types of processing operations which are likely to result in a high risk for the rights and freedoms of data subjects
The National Commission for Data Protection (“Commission nationale pour la protection des données”, or “CNPD”) recently published a report on the consequences of Brexit in the sphere of international data transfers.
Lors d’un panel qui s’est récemment tenu à Luxembourg sur le thème de l’art et de la finance, il a été l’occasion de revenir sur les mesures qui doivent être prises lorsque la Blockchain est utilisée pour un traitement de données personnelles.
The CNPD (Commission Nationale pour la Protection des données, or “CNPD”) has, until now, adopted a cooperative approach with the entities requesting guidance and has, in particular, met representatives of important sectors in Luxembourg.
Depuis le 25 mai 2018, le Règlement (UE) 2016/679 du Parlement européen et du Conseil du 27 avril 2016 relatif à la protection des personnes physiques à l'égard du traitement des données à caractère personnel et à la libre circulation de ces données,
IT is key. This is not the slogan of an IT service provider but one of the lessons to be drawn from the CSSF Circular 18/698. Investment fund managers subject to this circular have strengthened obligations regarding their IT infrastructures, outsourcing, internal governance and data protection.
The General Data Protection Regulation (“GDPR”) took direct effect in Luxembourg on 25 May 2018, but since it allows EU Member States latitude in specific areas,
On 25 May 2018, Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (GDPR) entered into force.
