Recital 163
General Data Protection Regulation · UE 2016/679
| (163) | The confidential information which the Union and national statistical authorities collect for the production of official European and official national statistics should be protected. European statistics should be developed, produced and disseminated in accordance with the statistical principles as set out in Article 338(2) TFEU, while national statistics should also comply with Member State law. Regulation (EC) No 223/2009 of the European Parliament and of the Council (16) provides further specifications on statistical confidentiality for European statistics. |
In Luxembourg, official statistics fall under STATEC (National Institute of Statistics and Economic Studies) governed by the amended law of 10 July 2011 organising the National Statistics Institute. The CNPD remains competent to supervise GDPR compliance on statistical processing not covered by the 223/2009 regime, in particular internal business statistics and BI analytics.
Luxgap practice: before qualifying a processing as 'statistical' to set aside certain GDPR obligations, check whether you are mandated by STATEC or by a national legislative act. Otherwise, the full GDPR regime applies and anonymisation must be demonstrated against EDPB criteria.
