Règlement grand-ducal du 27 novembre 2004 concernant le chargé de la protection des données et portant exécution de l'article 40, paragraphe (10) de la loi du 2 août 2002 relative à la protection des données à l'égard du traitement des données à caractère personnel. | http://data.legilux.public.lu/eli/etat/leg/rgd/2004/11/27/n1/jo — Luxembourg law | Esheria

Règlement grand-ducal du 27 novembre 2004 concernant le chargé de la protection des données et portant exécution de l'article 40, paragraphe (10) de la loi du 2 août 2002 relative à la protection des données à l'égard du traitement des données à caractère personnel.

This preamble identifies the Grand-Ducal regulation of 27 November 2004 and says it implements article 40(10) of the 2 August 2002 data protection law.

AI-assisted research synopsis — verify against the official legal text below.

Jurisdiction
Luxembourg
Instrument
Regulation
Citation
http://data.legilux.public.lu/eli/etat/leg/rgd/2004/11/27/n1/jo
Status
In force
Version
Undated source snapshot
Language
fr
Updated
Official source
View official record ↗
appointment compliance data governance data protection register privacy compliance public access to information publication record-keeping regulatory implementation reporting

Statute overview

About this statute

This preamble identifies the Grand-Ducal regulation of 27 November 2004 and says it implements article 40(10) of the 2 August 2002 data protection law. A data protection officer may only perform the role after approval by the national commission, and must update their knowledge at least once a year and prove it to the commission. The national commission must keep an updated list of approved data protection officers in Luxembourg, and anyone may consult it online for free. Only data protection officers approved by the National Commission may be designated by data controllers. The data protection officer must send a register extract to the National Commission every 4 months.