Together with the technologies blast, data protection is becoming a very hot legal topic. Dealing with personal data requires acute understanding of the underlying legal rules and principles. Moreover, the gap between the liberal US and European legal approaches is not easing transatlantic transfers of personal data.

We have an in-depth experience in implementing systems, processes and procedures relating to personal data processing, involving the employment and HR management fields (stock option plans, surveillance in the workplace, Internet and e-mails policies). In this respect, our group has regular contact with the Luxembourg authorities such as the National Commission for the Protection of Data. This improves our reactivity and allows us to find pragmatic solutions complying with the requirements of the law.

Personal data processing

We advise our clients on the different strategies to adopt concerning the processing of personal data and assist them in complying with the Luxembourg law relating to the protection of individuals with regard to the processing of personal data as well as with other fields of law. For example, we have built up a practical experience of the processing of personal data of employees notably concerning their rights, the proceedings and the data transfer issues. We also intervene on data protection matters relating to stock option or share purchase plans.

Notification and prior authorization

Our team can assist in filing the notification or prior authorization request required by the Luxembourg data protection law to process or transfer personal data. We set up solutions to ease the process as far as possible and have drawn-up templates to accelerate the use of official forms. We use the electronic format to submit notifications to the National Commission for the Protection of Data.

Data transfer

We have developed an extensive expertise relating to the transfer of personal data from Luxembourg to other European Union countries as well as to countries outside the EU (such as the US and India). We deal with the implementation of Corporate Binding Rules projects in international groups, allowing them to transfer personal data even to countries that do not ensure an adequate level of protection according to EU legislation.