Luxembourg LDP Article 72 Restrictions on Data Subject Rights for National Interest + Financial Sector Provisions. Article 72 transposes GDPR Article 23 specifying Luxembourg-permitted restrictions: (a) national security + defence (Service de Renseignement de l'Etat + Direction Generale de la Police - Service de Police Judiciaire); (b) public security + criminal investigation (Code d'Instruction Criminelle + Procureur d'Etat); (c) economic + financial interest including Luxembourg financial market supervision (CSSF + CAA) + monetary + budgetary + taxation matters (Administration des Contributions Directes + Administration de l'Enregistrement et des Domaines + TVA + AML/CFT); (d) public health (Direction de la Sante + Code de la Securite Sociale); (e) judicial independence + judicial proceedings + privileged communications + cross-border cooperation with prosecutors; (f) protection of data subject + rights of others; (g) enforcement of civil law claims + Luxembourg Civil Code Article 1382-1383; (h) Luxembourg banking secrecy (secret bancaire) under Loi du 5 April 1993 Article 41 - balance with GDPR Article 23 derogations + customer due diligence under AML 4MLD/5MLD/6MLD transposition; (i) Crypto-Asset Service Provider obligations under MiCA + travel rule cross-border information. Financial Sector Provisions (LU-DPA-Sector): CSSF Circulars CSSF 12/552 + CSSF 17/671 + CSSF 18/698 + CSSF 21/787 governance + cyber + cloud + outsourcing; Luxembourg-specific Sectoral Data Protection Rules + Banking Customer Data + AML/CFT KYC processing + ePrivacy + Privacy Notice in financial product disclosure + customer reporting. Insurance Sector: CAA Circular 15/3 + 19/3 + customer protection.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.