Recital 120
General Data Protection Regulation · UE 2016/679
| (120) | Each supervisory authority should be provided with the financial and human resources, premises and infrastructure necessary for the effective performance of their tasks, including those related to mutual assistance and cooperation with other supervisory authorities throughout the Union. Each supervisory authority should have a separate, public annual budget, which may be part of the overall state or national budget. |
In Luxembourg, the CNPD (Commission nationale pour la protection des donnees, not APDL) has a publicly accessible annual budget set in the state budget law and publishes a yearly activity report detailing its enforcement priorities. The law of 1 August 2018 on the CNPD sets out its status as an independent administrative authority, its public funding and the composition of its board. The CNPD acts as lead supervisory authority for many groups established in the Grand Duchy (telecoms, investment funds, web platforms).
Luxgap practice: each year, check the CNPD activity report for announced priority themes (cookies, transfers outside the EU, AI, Article 30 register) and refocus your remediation plan to cover those topics before year-end.
