By a decision rendered on 22 November 2022, the European Court of Justice (the Court) invalidates the provision of the anti-money laundering directive (AMLD) whereby the information on the beneficial owners of corporate and...more
The Grand Duchy of Luxembourg has just tabled a bill aimed at transposing the European Directive on whistleblowers. Even if the bill has to go through the entire legislative process, and will most certainly see its text...more
Last year, investment fund managers (IFMs) were caught by surprise with the immediate application of Circular 17/654 on IT outsourcing relying on a cloud computing infrastructure (the Cloud Circular), but every cloud has a...more
The Luxembourg data protection authority (CNPD) has published a list of processing activities triggering a mandatory data protection impact assessment (DPIA) following review by the European Data Protection Board (EDPB)....more
Just before summer recess, Luxembourg Parliament has adopted the law of 1 August 2018 which implements certain parts of the General Data Protection Regulation (GDPR) and repeals the former data protection law of 2 August...more
On 12 September 2017, the Luxembourg Government introduced a bill of law (the Bill) to complement the General Data Protection Regulation EU) 2016/679 (the GDPR). The Bill is planned to enter into force simultaneously with the...more