Enforcing jurisdiction
Luxembourg · Geography does not establish applicable law.
Confirmed applicable legislation
No confirmed legal basis recorded.
Privacy topics

Court case N° 46416 – Court Ruling (Luxembourg, 2021)

Court Ruling
DPA TALuxembourg24 September 2021Luxembourg
final
Court Ruling

Privacy enforcement record

This record is classified outside cookie consent. Subject classification does not confirm an applicable law. It is not included in cookie statistics or the Risk Calculator.

A French resident was labeled as an American national by a Luxembourg bank, which meant their personal data would be shared with U.S. authorities. They objected and wanted their data erased, but the Luxembourg authorities denied this request. This case highlights how international laws can affect individuals' data privacy rights.

What happened

A French resident's personal data was shared with U.S. authorities under FATCA without their consent.

Who was affected

The individual affected is a French resident with dual French and U.S. nationality.

What the authority found

The Luxembourg authorities ruled that sharing the individual's data was necessary for compliance with local law, rejecting their request for erasure.

Why this matters

This case shows the challenges individuals face when international laws intersect with personal data privacy. It serves as a reminder for companies to be aware of how international regulations can impact their data handling practices.

Recorded legal citations
Automatically processed
Art. 96 GDPR
View original scraped data
Art. 96(GDPR)

Original imported citations before automated processing; the processing history does not establish independent verification.

Decision AuthorityTA Luxembourg

Source checks

Linked-source text retrieved.

Automated check recorded — 18 March 2026.

Processing notes: articles corrected, national law identified, authority corrected.

Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources

Full Legal Summary
Detailed

The data subject is a French resident with a dual French and US nationality. They consider themselves as a French national rather than an American national because they have no link with the US, except for the fact that they were born there. In May 2020, they were informed by a banking institution in Luxembourg that they would be considered as an American national under the Foreign Account Tax Compliance Act ("FATCA"), and that the Luxembourg tax authorities would therefore share data relating to their bank account with the competent US authorities. The data subject objected to such processing and asked for the erasure of their personal data, but the Luxembourg authorities rejected this request by decision of 22 March 2021. They argued, among others, that the processing of the complainant's personal data was necessary for compliance with the Luxembourg Law of 24 July 2015 relating to FATCA. The data subject filed an appeal against the decision of 22 march 2021 with the Administrative Court of Luxembourg, and asked for urgent interim measures. The Administrative Court of Luxembourg rejected this appeal on the ground that the conditions for granting interim measures were not fulfilled. In particular, the Court found that none of the alleged breaches of the GDPR were serious or significant enough.

Outcome

Court Ruling

A ruling by a national court on a data-protection matter.

Related Cases (0)

No other cases found for Court case N° 46416 in LU

This is the only recorded case for this entity in this jurisdiction.

Details

Ruling Date

24 September 2021

Authority

DPA TALuxembourg

About this data

Data: GDPRhub (noyb.eu)
Licensed under CC BY-NC-SA 4.0
Automatically normalized and classified

Cite as: Cookie Fines. Court case N° 46416 - Luxembourg (2021). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: