Enforcement per member state
AI Act enforcement in Luxembourg
Last verification round: 2026-08-10
- Who supervises · in a bill
- National Commission for Data Protection (CNPD), intended default market surveillance authority (bill 8476, not yet adopted)
- Single point of contact
- CNPD (intended single point of contact and national coordinator under the bill).
- Implementing law
- before parliament
The situation in this country
Luxembourg chose a clear course early on: bill 8476, filed on 23 December 2024, makes the CNPD the default market surveillance authority, national coordinator and single point of contact, with ALIA supervising AI-generated content (Article 50(2) and (4)) and a separate authority for AI use by the judiciary. However, as of mid-2026 the bill was still in parliamentary committee, so formal designation is outstanding.
Obligations at play here
What has happened
2026-01-20 | CNPD
CNPD and government launch 'The AI Act in action'
At the conference 'The AI Act in action' at the Chamber of Commerce, the CNPD and Minister Elisabeth Margue (responsible for Media and Connectivity) presented the path from policy to practice for the AI Act in Luxembourg, with over 300 participants. The CNPD thereby publicly positioned itself as the future AI supervisor pending adoption of bill 8476.
2024-12-23 | Regering van Luxemburg / Chambre des Deputes
Bill 8476 designates CNPD as central AI supervisor
The government filed bill 8476 with the Chamber of Deputies. It makes the CNPD the default market surveillance authority for Annex III systems and non-sectoral AI, national coordinator and single point of contact. ALIA becomes the supervisor for the output transparency of Article 50(2) and (4), and a judicial control authority covers AI use by courts and prosecutors. The bill had not yet been adopted as of mid-2026.