Luxembourg anticipates the GDPR: abolition of authorisation for several critical data processing activities and for SCC based data transfers outside the EEA/EU

On 31 August 2016 a law proposal was submitted to the Luxembourg Parliament in order to abolish several authorisation regimes that are currently foreseen in the 2002 Luxembourg Data Protection Act ("Loi luxembourgeoise du 2 août 2002 relative à la protection des personnes à l'égard du traitement des données à caractère personnel"). Click here for more.