LuxembourgGDPR Article 9, Special Categories of Personal Data as Applied in Luxembourg
Regulation (EU) 2016/679, Art. 9
A citation is an address, not a summary. The first part names the law; what follows narrows it to the exact section, article or paragraph.
What follows is LexLint's own research summary of this law, not legal advice.
In force since 25 May 2018.
A sensitive categories rule binding public and private bodies.
As of 24 August 2026.
What it requires
- Ground the processing of any biometric identifier of a person in Luxembourg, including a faceprint or voiceprint captured for unique identification, on a General Data Protection Regulation (GDPR) Article 9(2) condition such as explicit consent; no Luxembourg-specific addition to this baseline was found.
What it reaches
Excludes recording-derived identifiersNo
What this law does
Drafted with AI from the cited sources under the direction of UnGovr staff. UnGovr holds editorial responsibility for this page.
General Data Protection Regulation (GDPR) Article 9(1) classifies biometric data processed for unique identification as a special category. Luxembourg has no biometric-specific national derogation: a CMS Expert Guide entry states directly that no specific provisions regarding biometrics are envisaged in the Act of 1 August 2018, and that the general GDPR framework applies without a national addition. A voiceprint or faceprint captured for identification purposes is therefore governed in Luxembourg by GDPR Article 9 alone. No Luxembourg-specific voiceprint case or regulatory guidance is known.
When LexLint raises it
processes_biometricsprocesses_voice
Read the law
CMS Expert Guide to Data Protection and Cyber Security Laws, Luxembourg entry
Every line above is drawn from the primary source linked here, read on the date shown. This is a research summary, not legal advice.