Luxembourg Data Protection Commission vigorously enforces GDPR
Introduction: Article 37 of GDPR requires the appointment of a Data Protection Officer (“DPO”). The appointment of a DPO is a critical compliance requirement and recent decisions of the Luxembourg Data Protection Commission (a.k.a the “CNPD”) illustrate the implications of a failure to appoint a DPO, as well as the failure to adhere to GDPR’s [...]