For information purposes, the European Data Protection Board (EDPB) publishes on its website a list of the decisios taken and sanctions ordered by the European supervisory authorities to allow the various actors to better understand the application of the General Data Protection Regulation (GDPR).

 This information, quite substantial for monitoring the consistency in the matter, brings clarity to the current legal context.

Luxembourg’s National Commission for Data Protection (Commission nationale pour la protection des données or “CNPD”) has not yet issued a publication on any sanctions that it may have ordered. It would appear that this is due to the fact that the Luxembourg supervisory authority does not wish to publish information on sanctions that may have been ordered as long as the periods for their appeal have not yet expired.

We will thus monitor this situation in the Grand Duchy of Luxembourg…

 For further information or assistance with the GDPR, contact our Digital team at +3522625621 ot send us an email at