Luxembourg: Security

On 23 July 2025, Luxembourg experienced a digital blackout. A nationwide telecommunications outage disrupted internet, mobile, and landline services, leaving businesses and emergency services scrambling.

On 15 January 2025, the CSSF published a communiqué as a reminder of the entry into application of the Digital Operational Resilience Act (DORA) and its underlying regulatory technical standards...

The Digital Operational Resiliance Act (DORA) - a cornerstone regulatory framework in the financial sector enhancing cybersecurity practices and standards across the EU. On 28 February 2020...

Cyber Resilience Act: With the increase of successful cyberattacks, the Cyber Resilience Act aims at strengthening cybersecurity requirements to make products with digital elements...

The current network and information security (NIS) directive implemented into national law will be replaced and strengthened by a second directive which is currently being discussed.

Data Privacy Comparative Guide for the jurisdiction of Luxembourg, check out our comparative guides section to compare across multiple countries

On 12 September 2017, the Luxembourg Parliament issued bill of law no. 7184 (the "Bill of Law") in order to complement Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and the free movement of such data, and repealing Directive 95/46/EC ("GDPR")