Luxembourg: Introduced Law implementing AI Act (Regulation 2024/1689)

On 23 December 2024, the law implementing provisions of the Regulation (EU) 2024/1689, which lays down harmonised rules on artificial intelligence (AI), was introduced to the Chamber of Deputies. The objective of this regulation is to ensure the safe and ethical development and use of AI within the European Union. The law implementing the Act establishes various national authorities in Luxembourg with responsibilities for overseeing AI systems. Specifically, the law designates multiple authorities for enforcement, including the National Commission for Data Protection (CNPD) as the default market surveillance authority and sector-specific bodies such as the CSSF for financial entities and ALIA for media-related AI systems. In addition, the law establishes a comprehensive governance framework to monitor, investigate, and ensure compliance with the EU AI Regulation, focusing on high-risk AI systems and fostering innovation through regulatory sandboxes. Administrative sanctions, including fines, are prescribed for non-compliance to reinforce accountability. Luxembourg's amendments to existing laws on data protection, financial supervision, and insurance serve to align national regulations with the AI framework.