On 11 October 2016,the CNPD and the media and communications department (Service des médias et des communications - SMC) organised a conference on the main changes introduced by the new general data protection regulation. This conference marked the start of a series of events specially devised as part of the ‘Digital Lëtzebuerg’ initiative to present the new regulation to the various stakeholders and to guide them through its implementation. Before an audience of more than 500 people at the Maison du Savoir in Esch-Belval, Prime Minister and Minister for Communications and Media Xavier Bettel spoke of the challenges and opportunities of the new European regulation for the Grand Duchy.
As part of the Digital Lëtzebuerg initiative, the CNPD and the Ministry of State (SMC) are proud to invite you to a series of events specially designed to present the new general data protection regulation and to guide you through its implementation. This initiative will start with a conference that will take place in Belval on October 11. Please find attached the invitation with the agenda of the day and the link to register before October 4th. The language of the conference is French and/or English depending on the individual speaker’s choice. Information regarding the specific seminars will follow. Feel free to share this information with other people who could be interested.
"In view of the upcoming Article 31 Committee meeting on the EU-US Privacy Shield, the Article 29 Working Party would like to reiterate its position as expressed in its April 2016 public opinion. The objective of the Working party is to make sure that an essentially equivalent level of protection is maintained when personal data is processed under the Privacy Shield."
New EU data protection rules which aim to give citizens back control of their personal data and create a high, uniform level of data protection across the EU fit for the digital era was given their final approval by MEPs on Thursday. The reform also sets minimum standards on use of data for policing and judicial purposes. Parliament's vote ends more than four years of work on a complete overhaul of EU data protection rules. The regulation will enter into force 20 days after its publication in the EU Official Journal. Its provisions will be directly applicable in all member states two years after this date. Member states will have two years to transpose the provisions of the directive into national law.
Overall, the Working Party welcomes the significant improvements brought by the Privacy Shield compared to the Safe Harbour decision. In particular, the insertion of key definitions, the mechanisms set up to ensure the oversight of the Privacy Shield list and the now mandatory external and internal reviews of compliance are a positive step forward. However, the Working Party has strong concerns on both the commercial aspects and the access by public authorities to data transferred under the Privacy Shield.
On 2-3 February 2016, the Article 29 Working Party (WP29) met to discuss the consequences of the CJEU judgment in the Schrems case for international transfers. The WP29 welcomes the fact of the conclusion of the negotiations between the EU and the U.S. on the introduction of a "EU-U.S. Privacy Shield", which meets the deadline set by the WP29 in its statement of 16 October. It looks forward to receive the relevant documents in order to know precisely the content and the legal bindingness of the arrangement and to assess whether it can answer the wider concerns raised by Schrems judgment as regards international transfers of personal data.
National Commission for Data Protection
1, avenue du Rock’n’Roll
Tel.: (+352) 26 10 60-1
Fax: (+352) 26 10 60-29