Luxembourg. Comprehensive data protection. Act
Loi du 2 août 2002Law of 2 August 2002 on the protection of persons with regard to the processing of personal data
Partly verified
Medium confidence.The CNPD's ten-year brochure states the law entered into force on 1 December 2002; the Cambridge CIPIL page says 2 August 2002, which is the date of the law. Repeal wording is from a 2018 government letter seen via search; the 20 August 2018 date follows the existing lu-law-2018 row. text_url is the Legilux ELI link, whose text was not read.
§1Summary
- Synopsis
Luxembourg's transposition of Directive 95/46/EC. It replaced the 1979 law and created the Commission nationale pour la protection des données. It was repealed by the Law of 1 August 2018, which organised the CNPD and set the national data protection regime alongside the GDPR.
- Key themes
- Unique features
Created the CNPD.
- SaaS relevance
Historical only; replaced by the Law of 1 August 2018 (see lu-law-2018) and the GDPR.
§2Obligations
- Breach notification
- None
- DPO
- No
§3Dates
- Key dates
- Adopted
- In force
- Ended
- Law of 2 August 2002; in force 1 December 2002 (CNPD); transposed Directive 95/46/EC; repealed by the Law of 1 August 2018, in force 20 August 2018
§4Text and authority
- Text
- Authoritative text legilux.public.lu
- Authority
- Commission nationale pour la protection des données (CNPD)
§5Where it applies
- Domestic law of
- Luxembourg
§6Sources and verification
- Sources consulted
- Verification
Medium confidence.
Partly verified
Medium confidence.The CNPD's ten-year brochure states the law entered into force on 1 December 2002; the Cambridge CIPIL page says 2 August 2002, which is the date of the law. Repeal wording is from a 2018 government letter seen via search; the 20 August 2018 date follows the existing lu-law-2018 row. text_url is the Legilux ELI link, whose text was not read.