LexLint.ioBeta

Know the law your code answers to.

Law / Luxembourg

Loi du 1er août 2018 Article 65, Anonymisation and Pseudonymisation in Research and Statistics Processing in Luxembourg

Loi du 1er août 2018, Art. 65, points 3 and 4

In force since .

A de-identification rule binding public and private bodies.

Audit expectation
none

What it requires

  • If you process personal data in Luxembourg for scientific or historical research or for statistics, anonymise or pseudonymise the data, or apply another functional separation measure, so that the data collected cannot be used to take decisions or actions concerning the people it relates to (Loi du 1er août 2018, Article 65, point 3).
  • Use a trusted third party, functionally independent of you, to anonymise or pseudonymise the data (Article 65, point 4).
  • For each research or statistics project, document and justify the exclusion of any of the measures Article 65 lists (Article 65, final paragraph).

These lines are LexLint's reading of the law's text.

What record it asks for

Logging duty

Points 3 and 4 of Article 65 require anonymisation, pseudonymisation and a trusted third party, and name no log. The log files that point 8 of the same article requires are on the row lu-eu-2016-679-12-21-loi-du-1er-aout-2018-63-65.

Kind
None
As of

What this law does

Drafted with AI

Drafted with AI from the cited sources under the direction of UnGovr staff. UnGovr holds editorial responsibility for this page. How this site is made

Research summary

Legal information, not legal advice. This is LexLint's own research summary of a public legal source, and it creates no attorney-client relationship. For decisions that matter, consult qualified counsel in the relevant jurisdiction. About LexLint

A controller that processes personal data for scientific or historical research or for statistics must put in place anonymisation, pseudonymisation or another functional separation measure, so that the data collected cannot be used to take decisions or actions concerning the people it relates to (Article 65, point 3). The controller must also use a trusted third party, functionally independent of the controller, to anonymise or pseudonymise the data (Article 65, point 4).

For each research or statistics project, the controller must document and justify the exclusion of any of the measures Article 65 lists (Article 65, final paragraph).

When LexLint raises it

When your app profile says your app processes personal data or processes de-identified data.

Back to the example  ·  Lint your app

Page updated .