Publication Of The First Draft Bill Complementing The European General Data Protection Regulation

The first draft bill complementing the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC ("GDPR") was issued on 12 September 2017 (the "Draft Bill").

In spite of its direct effect, the GDPR, which will apply to all the EU Member States as of 25 May 2018, gives the Member States a certain flexibility to take additional local provisions. The Draft Bill was issued in this context.

The current Luxembourgish legal framework regarding the protection of personal data, based on the transposition of the European Directive 1995/46/CE of 24 October 1995, mainly relies upon the amended law of 2 August 2002 concerning the protection of individuals with regard to the processing of personal data (the "Law of 2002").