GDPR Fines in Luxembourg
5 data protection authorities · Since 2021
Total Actions
46
Total Fines
€502K
Average Fine
€16K
Among actions with fines
Enforcement Trend
Stable
About Data Protection Enforcement in Luxembourg
Luxembourg is an active enforcer of GDPR and data-protection requirements, with 5 data protection authorities overseeing compliance since 2021. To date, Luxembourg's regulators have taken 46 enforcement actions totaling €502K in fines. The landmark case was a €175,000 fine against Credit Institution in 2025, among the most significant GDPR and data-protection penalties recorded for this jurisdiction. Enforcement activity has maintained a consistent pace, reflecting a steady regulatory approach to GDPR and data-protection oversight. The most frequently enforced violations are cannot withdraw cookie consent (1 cases), no granular cookie choice (1 cases), third-party cookies without consent (1 cases), reflecting the regulatory focus areas in this jurisdiction.
Data Protection Authorities
Largest Fines in Luxembourg
All Luxembourg actionsRecent Enforcement Actions in Luxembourg
Enforcement Actions by Year
| Year | Actions | Total Fines |
|---|---|---|
| 2021 | 20 | €290K |
| 2022 | 11 | €23K |
| 2023 | 6 | €5K |
| 2024 | 4 | €2K |
| 2025 | 3 | €182K |
| 2026 | 2 | €0 |
Most Common Violations in Luxembourg
Frequently Asked Questions
How many GDPR and data-protection enforcement actions has Luxembourg issued?
Luxembourg has issued 46 enforcement actions related to GDPR and data-protection, totaling €502K in fines.
What is the largest GDPR and data-protection fine in Luxembourg?
The largest recorded penalty was a €175K fine against Credit Institution on 2025-01-06.
How many data protection authorities operate in Luxembourg?
Luxembourg has 5 data protection authorities overseeing GDPR and data-protection enforcement.
Is GDPR and data-protection enforcement stable in Luxembourg?
GDPR and data-protection enforcement in Luxembourg has been relatively stable over recent years.