Data protection lawyers

Our experts, as data protection lawyers, can assist you with file registrations

Data Protection in Luxembourg is governed by the Law of 2 August 2002 on the protection of persons with regard to the processing of personal data, and by the law of 30 May 2005 laying down specific provisions for the protection of persons with regard to the processing of personal data in the electronic communications sector.

According to this law, data processing must have a legitimate goal, a specific purpose, the collected data must be necessary and proportionate to the accomplishment of the purpose and the length of data storage must be limited to the time period necessary to achieve the predefined purpose.

Our data protection lawyers assist you to file registrations with the Data Protection authority including prior notifications and prior authorisations. Indeed, some specific processing operations must be authorized, such as CCTV, supervision of the employees at the workplace (phone conversations, email and IT tools, etc.), transfer of data in third countries, or processing of biometric data.

As of 25 May 2018, the General Data Protection Regulation (GDPR) is applicable in Luxembourg and in the European Union. Our data protection lawyers can also assist you in order to verify that the processing operations controlled by your company comply with these new regulation’s requirements. The GDPR includes new provisions on consent of the data subject, right to erasure, data portability, data breaches, data protection by design and by default, new sanctions, etc.