Luxembourg – Data protection & Privacy

By Daniel Morris | 11. September 2018

Part II: Specific objectives of the National Action Plan 2020-2022

1. The state duty to protect human rights

(…)

1.15. Protection of human rights in business in the context of new information and communication technologies (ICT), including artificial intelligence (AI)

 

Context

One of the risk sectors recognised in the NAP2 is the new information and communication technologies, including artificial intelligence. This sector is developing very rapidly worldwide in the context of increasing digitalisation.

In his report to the UN General Assembly in 2018, Mr David Kaye, UN Special Rapporteur on the promotion and protection of the right to freedom of opinion and expression, analysed the topic of artificial intelligence (AI) in more detail. Within this framework, each State is obliged to uphold human rights, including the right to freedom of opinion, freedom of expression and access to information, the right to privacy, the obligation of non-discrimination and the right to an effective remedy.

In Europe, the General Data Protection Regulation (GDPR) has been the main legal instrument regulating the collection and use of data since its introduction in 2018. In Luxembourg, the supervisory authority is the Data Protection National Commission (CNPD) [Commission nationale pour la protection des données].

 

Objectively verifiable indicators ×        GDPR
Verification sources ×        European legislation and institutions

×        CNPD [Commission nationale pour la protection des données] – UEL [Union des Entreprises Luxembourgeoises] / INDR [Institut National pour le Développement durat et la Responsabilité sociale des entreprises]
Expected results ×        Regular consultations with the CNPD [Commission nationale pour la protection des données]

×        Increased understanding and awareness of the link between human rights and ICT, including AI
Implementation timeline Duration of NAP 2
Means of implementation ×        CNPD [Commission nationale pour la protection des données]

×        UEL [Union des Entreprises Luxembourgeoises] / INDR [Institut National pour le Développement durat et la Responsabilité sociale des entreprises]

×        Civil Society, including ALNU [Association Luxembourgeoise Pour les Nations Unies]

 

The 2020-22 NAP states the second edition of the National Action Plan complements the first NAP. Additional information about the first NAP can be found here.