Article 59

Activity reports

General Data Protection Regulation · UE 2016/679

Activity reports

Each supervisory authority shall draw up an annual report on its activities, which may include a list of types of infringement notified and types of measures taken in accordance with Article 58(2). Those reports shall be transmitted to the national parliament, the government and other authorities as designated by Member State law. They shall be made available to the public, to the Commission and to the Board.

Luxembourg specificity
loi luxembourgeoise du 1er aout 2018 portant organisation de la Commission nationale pour la protection des donnees

In Luxembourg, it is the CNPD that draws up this annual activity report, transmitted to the Chamber of Deputies and the government, and published on cnpd.lu. The law of 1 August 2018 organising the CNPD sets out the tasks and operation of the authority, which details each year its thematic enforcement campaigns and breach notification statistics.

Luxgap practice: we systematically integrate the latest CNPD annual report into your compliance plan, to align your priorities with the enforcement themes actually announced for the current year.