Independent reporting on data, AI and digital regulation in Luxembourghttps://dataplaz.lu/enhttps://dataplaz.lu/en/ai-act-luxembourg-authorities-cnpd/https://dataplaz.lu/en/ai-act-luxembourg-authorities-cnpd/Draft law No. 8476 makes the CNPD Luxembourg's default AI Act authority, with the CSSF and CAA for their sectors. It was still not adopted in October 2026.Tue, 06 Oct 2026 00:00:00 GMTAI Acthttps://dataplaz.lu/en/cssf-dora-incident-reporting-instructions/https://dataplaz.lu/en/cssf-dora-incident-reporting-instructions/On 29 September 2026 the CSSF added seven field-level instructions to the ESAs' guidance on DORA major ICT incident reports, aimed at better data quality.Tue, 06 Oct 2026 00:00:00 GMTFinance & DORAhttps://dataplaz.lu/en/dora-register-of-information-luxembourg/https://dataplaz.lu/en/dora-register-of-information-luxembourg/Luxembourg financial entities must keep a DORA register of all ICT third-party contracts and file it yearly; the hard part is data quality, not the template.Sat, 03 Oct 2026 00:00:00 GMTFinance & DORAhttps://dataplaz.lu/en/ai-act-high-risk-obligations-delay-2026/https://dataplaz.lu/en/ai-act-high-risk-obligations-delay-2026/The Digital Omnibus moved AI Act high-risk duties from 2 August 2026 to 2 December 2027 and 2 August 2028. Other obligations already apply in Luxembourg.Thu, 01 Oct 2026 00:00:00 GMTAI Acthttps://dataplaz.lu/en/meluxina-ai-luxembourg-ai-factory/https://dataplaz.lu/en/meluxina-ai-luxembourg-ai-factory/MeluXina-AI is the AI supercomputer of the Luxembourg AI Factory, contracted on 22 July 2026. Here is what it offers and how firms and public bodies get access.Thu, 01 Oct 2026 00:00:00 GMTPublic sectorhttps://dataplaz.lu/en/nis2-luxembourg-law-scope-obligations/https://dataplaz.lu/en/nis2-luxembourg-law-scope-obligations/Luxembourg transposed NIS2 by the law of 5 May 2026, in force since 10 May 2026: scope, ILR and CSSF supervision, registration, incident reporting and DORA.Wed, 30 Sep 2026 00:00:00 GMTPublic sectorhttps://dataplaz.lu/en/data-owner-vs-data-steward/https://dataplaz.lu/en/data-owner-vs-data-steward/The data owner is accountable, the data steward manages definitions and quality, the custodian runs the systems. How to assign the roles in Luxembourg.Tue, 29 Sep 2026 00:00:00 GMTData governancehttps://dataplaz.lu/en/lnds-luxembourg-national-data-service/https://dataplaz.lu/en/lnds-luxembourg-national-data-service/LNDS helps Luxembourg public bodies make protected data reusable for research and innovation; first requests under the law of 19 December 2025 are due in 2026.Sat, 26 Sep 2026 00:00:00 GMTPublic sectorhttps://dataplaz.lu/en/ai-literacy-ai-act-article-4-luxembourg/https://dataplaz.lu/en/ai-literacy-ai-act-article-4-luxembourg/Since 2 February 2025, every provider and deployer of AI in Luxembourg must take measures to build AI literacy among staff. What the rule requires after the 2026 Omnibus.Thu, 24 Sep 2026 00:00:00 GMTAI Acthttps://dataplaz.lu/en/eu-data-act-luxembourg/https://dataplaz.lu/en/eu-data-act-luxembourg/The EU Data Act applies in Luxembourg since 12 September 2025. Bill 8809 would make the ILR the main authority. Obligations, deadlines and who is affected.Tue, 22 Sep 2026 00:00:00 GMTData governancehttps://dataplaz.lu/en/high-risk-ai-system/https://dataplaz.lu/en/high-risk-ai-system/A high-risk AI system is one covered by Article 6 of the AI Act, via Annex I products or Annex III use cases; its obligations apply from 2 December 2027.Sat, 19 Sep 2026 00:00:00 GMTExplainershttps://dataplaz.lu/en/master-data-management-mid-sized-companies/https://dataplaz.lu/en/master-data-management-mid-sized-companies/MDM means one trusted, owned version of customer, supplier, product and legal-entity data. What it covers, the warning signs and how a mid-sized company can start.Wed, 16 Sep 2026 00:00:00 GMTData governancehttps://dataplaz.lu/en/bcbs-239-risk-data-aggregation-luxembourg-banks/https://dataplaz.lu/en/bcbs-239-risk-data-aggregation-luxembourg-banks/BCBS 239 sets 14 principles for aggregating and reporting risk data; for Luxembourg banks the ECB's May 2024 guide and CSSF Circular 12/552 make them concrete.Sat, 12 Sep 2026 00:00:00 GMTFinance & DORAhttps://dataplaz.lu/en/data-governance-maturity-assessment/https://dataplaz.lu/en/data-governance-maturity-assessment/A data governance maturity assessment scores capabilities on a 0–5 scale against evidence. Here is what to measure, whom to interview and how to build a roadmap.Tue, 08 Sep 2026 00:00:00 GMTData governancehttps://dataplaz.lu/en/luxembourg-ai-data-strategy-2030/https://dataplaz.lu/en/luxembourg-ai-data-strategy-2030/Luxembourg presented its AI, data and quantum strategies on 19 May 2025 under 'Accelerating digital sovereignty 2030'. Documents, measures and what they mean for firms.Sat, 05 Sep 2026 00:00:00 GMTPublic sector