On December 23, 2024, the Luxembourg Parliament introduced Bill No. 8476, implementing certain provisions of the EU Artificial Intelligence Act (the AI Act). The bill additionally proposes amendments to the Act on the organization of the National Commission for Data Protection (CNPD) and the general data protection regime, the Act on creating a financial sector supervisory commission, and the Act on the insurance sector. 

What are the key provisions of the bill? 

The bill states that it supplements the AI Act with the necessary national provisions, in particular the designation of the national authorities responsible for applying and monitoring the AI Act, i.e., the notifying authorities and the market surveillance authorities, and the setting of administrative penalties. 

Competent authorities 

The bill designates the Luxembourg Institute for Standardization, Accreditation, Safety and Quality of Products and Services (ILNAS) and the Government Data Protection Commission with the State (CGPD) as notifying authorities in accordance with Articles 28(1) and 70(1) of the AI Act. 

Additionally, the bill designates the CNPD as the market surveillance authority and as the notified body when a high-risk artificial intelligence (AI) system is to be put into service by law enforcement, immigration, or asylum authorities.

The Insurance Commission and the Financial Sector Supervisory Commission are designated as the market surveillance authority when an AI system is placed on the market, commissioned, or used by an entity subject to their respective supervision.

The bill further details instances wherein the Judicial Control Authority, the Agency for Medicines and Health Products, ILNAS, the Luxembourg Independent Audiovisual Authority, and the Luxembourg Institute of Regulation will be designated as market surveillance authorities. 

You can read the bill here and track its progress here, both only available in French.