Can Luxembourg’s Data Protection Authority Bring GDPR Class-Action Lawsuits?
Yes. Luxembourg’s National Commission for Data Protection (CNPD) is now a qualified entity authorized to bring class-action litigation on behalf of consumers whose GDPR rights have been violated. The authority




