Retention Schedules Guidance Note – Luxembourg

he purpose of this note is to provide for comprehensive guidelines regarding retention periods for personal data processed in Luxembourg.

As a reminder, Luxembourg is a Member State of the European Union ("EU") and therefore falls under the scope of the General Data Protection Regulation (Regulation (EU) 2016/679 of 27 April 2016) ("GDPR").

As a European regulation, the GDPR is directly applicable in Luxembourg law and does not require to be transposed into national law. Therefore, except where permitted by the GDPR and necessary, Luxembourg has not adopted any other law to govern personal data collection, processing, and protection. The GDPR became applicable on the 25 May 2018.