Luxembourg: Privacy

The EU's digital regulatory framework—spanning the AI Act, GDPR reforms, the Data Act, NIS2, and the Cyber Resilience Act—extends far beyond European borders...

Luxembourg's data protection authority has issued comprehensive guidance on employee monitoring practices, addressing the legal boundaries employers must navigate when implementing surveillance measures in the workplace. The guidance clarifies permissible monitoring methods, from telephone recording and CCTV to biometric systems, while emphasizing core data protection principles that govern employer-employee relationships.

On April 14, 2026, the European Data Protection Board (EDPB) published a draft template for conducting data protection impact assessments (DPIAs) under the EU General Data Protection Regulation...