Cybersecurity Policy Report, Luxembourg DPA Issues Data Accountability Guidance for SMEs, (Jun 5, 2024)

By Tony Foley

The Luxembourg National Commission for Data Protection (CNPD) announced yesterday that it had launched “Data Accountability from A to Z” (DAAZ), a compliance tool addressing the challenges that start-ups and small and medium-sized enterprises (SMEs) in the country face in complying with the requirements of the European Union’s General Data Protection Regulation (GDPR).

The DAAZ project was co-financed by the EU as part of a compliance support toolkit project, according to CNPD’s news release. It provides users with a free online tool to allow SMEs to integrate their responsibilities under the GDPR as controllers or subcontractors in the context of their operations. CNPD noted that SMEs often were at a disadvantage compared with larger organizations in terms of resources and expertise, and the fact that they operate in a complex economic environment with the breakthrough of artificial intelligence and the rapidly evolving legal landscape.

DAAZ was developed in two phases, the first focused on a questionnaire to which 215 entrepreneurs responded and the second on developing, testing, and optimizing the platform. CNPD said the platform aimed to support citizen engagement, equalities among members of society, and the implementation of EU rights and values. “It’s a very fun tool that takes advantage of the advantages of gamification,” said Pascal Steichen, chief executive officer of the Luxembourg House of Cybersecurity. “We have created a platform that is intuitive, educational and affordable for everyone.”

News: InternationalLegislation DataPrivacy GDPR