Luxembourg — AI Regulations

04 NOV 2025 · Law / Act

Bill 8309 implementing Digital Services Act in Luxembourg

On 11 April 2025, Luxembourg’s Law of 4 April 2025 implementing Digital Services Act entered into force. The law applies to providers of intermediary services falling within scope in Luxembourg and operationalises national supervision and enforcement of Digital Services Act obligations by empowering the Luxembourg Competition Authority as the Digital Services Coordinator and competent authority under the national framework. From that date, the national procedures and powers set out in the law...

✓ ✓ OfficialContent Moderationlegilux.public.lu ↗

26 MAR 2025 · Other

National Commission for Data Protection's investigation into video surveillance practices at state secondary school for alleged violations of the GDPR (Deliberation No. 2FR/2025)

On 26 March 2025, the National Commission for Data Protection (CNPD) of Luxembourg issued Deliberation No. 2FR/2025 concerning video surveillance at a state-run secondary school. The decision followed an investigation into the school's data processing practices, which had been attributed to the Ministry responsible for the Lycée. The CNPD found that the school acted as the data controller and had committed several violations of the General Data Protection Regulation (GDPR), including failures...

✓ ✓ OfficialNational Strategycnpd.public.lu ↗

02 MAR 2025 · Other

National Commission for Data Protection guidelines on use of DeepSeek

On 3 February 2025, the National Commission for Data Protection (CNPD) adopted guidelines on the use of the Artificial Intelligence (AI) tool DeepSeek R1. It raised concerns about data protection risks, including DeepSeek's lack of sufficient safeguards for personal data protection. It highlighted that the AI model, developed in China, does not comply with the General Data Protection Regulation (GDPR) and offers no clear framework for data rights or security. It highlighted that DeepSeek's da...

✓ ✓ OfficialNational Strategycnpd.public.lu ↗

26 FEB 2025 · Other

National Commission for Data Protection Code of Conduct for temporary employment sector under GDPR

On 26 February 2025, the National Commission for Data Protection (CNPD) adopted the Code of Conduct for the temporary employment sector under the General Data Protection Regulation (GDPR). The code is the first sectoral Code of Conduct in Luxembourg. The Code of Conduct serves as a voluntary compliance tool to clarify and concretise GDPR implementation within the temporary employment sector.

✓ ✓ OfficialNational Strategycnpd.public.lu ↗

23 DEC 2024 · Law / Act

Law implementing AI Act (Regulation 2024/1689)

On 23 December 2024, the law implementing provisions of the Regulation (EU) 2024/1689, which lays down harmonised rules on artificial intelligence (AI), was introduced to the Chamber of Deputies. The objective of this regulation is to ensure the safe and ethical development and use of AI within the European Union. The law implementing the Act establishes various national authorities in Luxembourg with responsibilities for overseeing AI systems. Specifically, the law designates multiple author...

National Strategychd.lu ↗

15 JAN 2024 · Other

CNPD Public Consultation on AI-related Issues

On 15 January 2024, the National Commission for Data Protection (CNPD) of Luxembourg announced that, in order to help meet the challenges faced by entities in the country when developing or integrating artificial intelligence (AI) into their operations and products, it was looking to develop appropriate guidelines and tools to support stakeholders using AI to meet their personal data protection obligations. The CNPD has also issued an open call for contributions on the application, developmen...

National Strategycnpd.public.lu ↗

03 FEB 2023 · Law / Act

Bill 8168 on the identification of natural persons and e-walllets regulation

On 2 March 2023, Bill 8168, amending the amended law of 19 June 2013 relating to the identification of natural persons, was introduced into the Luxembourg Chamber of Deputies. In particular, the Bill establishes a framework to regulate personal digital wallets ("e-wallets") to allow citizens to authenticate themselves online through a government app and other electronic devices. It is intended to host digital certificates of identity cards, residence permits, travel documents, driver's licens...

National Strategychd.lu ↗

04 JAN 2022 · Law / Act

Luxembourg: Bill 7847 implementing the EU Copyright in the Digital Single Market Directive (EU) 2019/790

On 1 April 2022, Bill no. 7847 implementing EU Directive (EU) 2019/790 on copyright in the Digital Single Market was adopted by the Parliament of Luxembourg. In particular, the Bill amends the Luxembourg law of 18 April 2001 on copyright, the law of 3 December 2015 on orphan works use and the law of 25 April 2018 on the collective management of copyright and the multi-territorial licensing of musical copyright of musical works that are hosted online. The Bill introduces: -exceptions to author...

✓ ✓ OfficialContent Moderationchd.lu ↗

Other

National Commission for Data Protection investigation into Amazon for violation of EU data protection law (GDPR)

On 12 March 2026, the Administrative Court issued a judgment annulling the National Data Protection Commission’s decision and sent the Amazon case back for reassessment. The ruling concerned an appeal against the Court’s previous judgment of 18 March 2025, which had upheld the CNPD decision of 15 July 2021. That decision had imposed a fine of EUR 746 million and coercive measures under penalty of a daily fine of EUR 746'000 on an online commerce operator for violations of Regulation (EU) 2016...

✓ ✓ OfficialNational Strategyjustice.public.lu ↗

National Strategy

Artificial Intelligence: A Strategic Vision for Luxembourg

AI law in Luxembourg: Published in May 2019 as part of the Digital Lëtzebuerg programme, "Artificial Intelligence: A Strategic Vision for Luxembourg" sets out a human-centric, applied approach to AI. It articulates seven pillars (living lab, data, ethics/privacy/security, investment & partnerships, public sector use, skills, international cooperation) and establishes an inter-ministerial governance approach to monitor and update AI policy....

✓ ✓ OfficialNational Strategyai-watch.ec.europa.eu ↗

National Strategy

National Data Strategy (aligned with the national AI and quantum strategies — 'Accelerating Digital Sovereignty 2030')

AI law in Luxembourg: The Luxembourg National Data Strategy, published as part of the 'Accelerating Digital Sovereignty 2030' initiative, establishes a centralized governance model, secure infrastructures and operational enablers to unlock public and private data value while preserving privacy and EU values. It aligns national action on data with parallel AI and quantum strategies to strengthen digital sovereignty, interoperability with European data spaces, and responsible innovation....

✓ ✓ OfficialNational Strategydigital-strategy.ec.europa.eu ↗

National Strategy

National Artificial Intelligence Strategy (part of 'Accelerating Digital Sovereignty 2030')

AI law in Luxembourg: Luxembourg’s National Artificial Intelligence Strategy, published as part of the “Accelerating Digital Sovereignty 2030” initiative, sets out a people-centred, EU-aligned roadmap to develop sovereign infrastructure, skills, governance, and sectoral AI adoption by 2030. It prioritises trustworthy AI, alignment with the European AI Act and GDPR, regulatory sandboxes, a national AI Factory and flagship projects across finance, health, public administration and other high-impact sectors....

✓ ✓ OfficialNational Strategydigital-skills-jobs.europa.eu ↗