Luxembourg Enters Data Collaboration to ‘Enhance Legal Certainty’

On Tuesday 23 September 2025, the Luxembourg Ministry for Digitalisation announced the signing of a Memorandum of Understanding (MoU) with Findata, the Finnish Social and Health Data Permit Authority, to establish and develop a collaboration in the fields of data governance and artificial intelligence.

The ministry has reported that the two-year collaboration comes at a pivotal moment in Luxembourg’s efforts to position itself as a pioneer in data governance and as a European gateway to other markets by offering access to reliable, high-quality data through a centralised and efficient procedure. This process, set to be supervised by the Government Commission for Data Protection to the State (CGPD) acting as the "Luxembourg Data Authority," will enhance legal certainty, support innovation and increase Luxembourg’s attractiveness to researchers and businesses alike. 

The ministry added that this dynamic will further be amplified by the Government’s decision to align procedures and designate the Luxembourg Data Authority as the centralised access body under sector-specific data reuse regulations, such as the European Health Data Space Regulation (EHDS) and reinforces Luxembourg’s strategic ambition to become a leading European Data Hub, promoting a “secure, trustworthy and innovation-driven internal market”.

According to the ministry, for Findata, the collaboration supports its mission to accelerate and streamline the use of health and social data, in full compliance with data security and privacy requirements. The Authority has acted as the centralised data permit authority for the secondary use of Finnish social welfare and health data, in a role comparable to that of a Health Data Access Body. During this time, it has developed and refined services and processes that enable secure and efficient data use. Finland’s national legislation, which defines Findata’s operations, has served as a model for the EHDS regulation, underlining the nation’s forward-looking role in the field. Findata has also actively shared its expertise and practical insights with other EU countries, helping them strengthen their capacities and avoid common pitfalls.

The ministry highlighted the MoU brings valuable experience to both parties and marks a significant step toward strengthening the institutional capacities of Findata and the Luxembourg Ministry for Digitalisation, including the CGPD and the Luxembourg Government IT Centre (CTIE) and reflects a shared commitment to building a robust and future-proof data ecosystem that supports cross-border collaboration, regulatory alignment and technological advancement.

The purpose of the MoU is to promote collaboration between both parties, particularly in the areas on knowledge transfer and the exchange of best practices. This is especially relevant regarding the re-use of pseudonymised data in secure processing environments and within AI regulatory sandboxes. Such cooperation enhances transparency and strengthens public trust in the secondary use of public sector data.

Moreover, beyond technical cooperation, the partnership aims to promote a culture of responsible data innovation, improve public awareness of data rights and opportunities and support the development of interoperable tools and frameworks that benefit European society as a whole, laying the groundwork for future initiatives that will help unlock the full potential of data-driven research and a data-driven economy.