Grand Duchy of Luxembourg Law of 1 August 2018 on the Organisation of the National Commission for Data Protection and the General Regime on Data Protection (Loi du 1er aout 2018 portant organisation de la Commission nationale pour la protection des donnees et du regime general sur la protection des donnees) + adopted by Chambre des Deputes 1 August 2018 + published Memorial A No. 686 of 16 August 2018 + effective 20 August 2018. Foundational Luxembourg data protection statute implementing EU GDPR Regulation 2016/679 + Loi du 1er aout 2018 on protection of personal data in matters relating to criminal investigations (transposing LED Directive 2016/680) + replaces Luxembourg 2002 Data Protection Law. Constitutional anchor Luxembourg Constitution Article 11 paragraph 3 protection of private life (revised 2008) + Article 28 freedom of expression + Convention 108+ adherence. Commission nationale pour la protection des donnees (CNPD - National Commission for Data Protection) - independent supervisory authority established by Loi du 1er aout 2018 + Belval (Esch-sur-Alzette) headquarters + 5 Commissioners appointed by Grand-Duc on Government proposal for 6-year term + member of European Data Protection Board (EDPB) + Convention 108+ Committee + Senior Commissioner for Information + Documentation + CSSF (Commission de Surveillance du Secteur Financier) financial sector coordination + Commissariat aux Assurances (CAA) insurance coordination. Universal application within Luxembourg + extraterritorial GDPR Article 3 application. Luxembourg-specific provisions: financial sector special considerations (banking + asset management + investment funds + fintech + crypto-asset service providers) + multilingual obligations (Luxembourgish + French + German) + workplace surveillance + journalism + whistleblowing + research + child protection + cross-border with neighbouring Belgium + France + Germany.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.