Loi du 1er août 2018 portant organisation de la Commission nationale pour la protection des données
Loi du 1er août 2018 portant organisation de la Commission nationale pour la protection des données — 83% of in-scope requirements covered.
3 requirements · 3 in scope (2 enforced · 1 designed). The 83% is weighted over the in-scope base.
Source: Loi du 1er août 2018 portant organisation de la Commission nationale pour la protection des données. National statute implementing/supplementing Regulation (EU) 2016/679 (GDPR) in Luxembourg. Substantive obligations resolve to the deep GDPR per-article registry (internal) reused via the framework__jurisdiction edge; this registry maps only the Luxembourg-specific national deltas.
By category
| Category | Reqs | Enforced | Designed | Advisory | Deferred | Coverage |
|---|---|---|---|---|---|---|
| GDPR transposition (national basis) | 1 | 1 | 0 | 0 | 0 | 100% |
| Supervisory authority + accountability | 1 | 1 | 0 | 0 | 0 | 100% |
| Breach notification (national channel) | 1 | 0 | 1 | 0 | 0 | 50% |
Every requirement → the KYE™ artefact that enforces it
| ID | Title | Status | KYE™ enforcement |
|---|---|---|---|
lu-cnpd.gdpr-transposition | Loi du 1er août 2018 portant organisation de la Commission nationale pour la protection des données transposes / supplements the GDPR (Reg. (EU) 2016/679) into Luxembourg national law — the substantive data-protection obligations resolve to the GDPR per-article bijection | enforced | audit_events: kye.purpose.admissibility.v1, kye.evidence.decision_map.v1engines: internal, internalconstitution_refs: constitution/12-PURPOSE-PERMISSION.md, constitution/21-DELEGATED-AUDITABILITY.md |
lu-cnpd.supervisory-authority | Cooperation with the national supervisory authority (the CNPD) — records of processing and the demonstrable-accountability account an AI agent's data processing must produce on request | enforced | audit_events: kye.evidence.pack.v1, kye.compliance.attestation.v1engines: internal, internalconstitution_refs: constitution/21-DELEGATED-AUDITABILITY.md, constitution/31-DATA-GOVERNANCE-PACK.md |
lu-cnpd.breach-notification | Personal-data breach notification to the CNPD (and affected individuals) within the GDPR Art. 33/34 window, on the national reporting channel | designed | audit_events: kye.signal.incident.opened.v1, kye.compliance.attestation.v1engines: internal, internalconstitution_refs: constitution/13-RESILIENCE-LOOP.md |
Canonical KYE™ surfaces referenced on this page: KYE Protocol™.