Law note · Luxembourg

GDPR Articles 82-83 and CNPD Enforcement in Luxembourg

The CNPD is the supervisory authority for administrative enforcement (General Data Protection Regulation (GDPR) Article 83 fines), while a GDPR Article 82 compensation claim is brought before the ordinary civil courts (tribunal d'arrondissement) rather than the CNPD itself, per secondary commentary read this pass. No Luxembourg-specific fine ceiling beyond the GDPR Article 83 maximum was identified.

What it asks of an app

• Expect the CNPD to have jurisdiction and administrative fining power over your processing of personal data of a person in Luxembourg, up to the General Data Protection Regulation (GDPR) Article 83 tiers.
• Expect any person who suffered material or non-material damage from an infringement to bring a direct compensation claim against you as controller or processor in the ordinary Luxembourg civil courts, under GDPR Article 82.

When LexLint raises it

Declared activities: crawls_web, trains_models, deploys_chatbot, high_risk_decisions, processes_biometrics, processes_voice

Primary source: Secondary commentary (CMS) on the CNPD's administrative role and civil-court compensation route, not independently confirmed against the Act's own text for the compensation-forum detail

← Back to the example  ·  Lint your app →