Duty LXD-1351
Processes biometric data, in Luxembourg
Each law's tag says when it binds: since in force proposed proposed
GDPR Article 9, Special Categories of Personal Data as Applied in Luxembourgsince 1 line
Regulation (EU) 2016/679, Art. 9 · Read the law's page
- Ground the processing of any biometric identifier of a person in Luxembourg, including a faceprint or voiceprint captured for unique identification, on a GDPR Article 9(2) condition such as explicit consent.
EU Artificial Intelligence Actsince 6 lines
Regulation (EU) 2024/1689 of the European Parliament and of the Council of
- Do not carry on a prohibited AI practice such as social scoring or real-time biometric surveillance in public spaces.
- If your AI system is high risk, meet the conformity requirements set for it.
- If you provide a general-purpose AI model, publish a summary of the data used to train it.
- If you provide a general-purpose AI model, honour opt-out requests from rights holders.
- If you operate a chatbot, disclose to users that they are interacting with one.
- Disclose to users that AI-generated synthetic media, including a deepfake, is what it is.
Projet de loi 8476, National Designation of AI Act Authorities and Penaltiesproposed1 line
Projet de loi 8476 portant mise en oeuvre de certaines dispositions du reglement (UE) 2024/1689 (Luxembourg, depose le 23 decembre 2024, avis du Conseil d'Etat du 10 juillet 2026) · Read the law's page
- As proposed, this bill designates Luxembourg's AI Act authorities and sets national fines; it would create no separate duty on an AI developer or deployer beyond identifying which authority enforces the AI Act against them.