Focus 1
CNPD
Luxembourg's data protection authority enforces GDPR and publishes local guidance, including cookie and privacy positions.
Open related pageLuxembourg digital regulation
Luxembourg has its own digital regulation layer.
EU regulations set the floor. Luxembourg national law and regulators add obligations through CNPD decisions, CSSF digital circulars, Legilux publications, and ILNAS standards activity.
Focus 2
CSSF digital circulars
CSSF circulars matter for products touching payments, crypto, investment, fund administration, ICT risk, DORA, and AML/VASP obligations.
Open related pageFocus 3
ePrivacy for Luxembourg sites
Luxembourg-registered websites need CNPD-aligned cookie consent, reject flows, and consent-management behavior.
Open related pageFocus 4
Legilux
Legilux is Luxembourg's official legal gazette and is monitored for national transpositions of EU digital directives.
Open related pageFocus 5
ILNAS
ILNAS is relevant for NIS2, standardisation, cybersecurity standards, and essential or important entities.
Open related pageFocus 6
Company setup, VAT, tax, and CCSS
For Luxembourg incorporation, business permits, VAT registration, CCSS, accounting, and tax setup, visit entrepreneur.burhuc.com. This page is only for digital regulation monitoring.
Open related pageSource updates
MEDIUMCNPD2026-06-07
CNPD cookie guidance watch entry
Luxembourg-specific privacy guidance is monitored for cookie consent, enforcement positions, and data protection obligations.
GDPRePrivacy