Knowledge
CNPD and media destruction: what internal audit expects in Luxembourg
A recycling ticket is not a certificate. The CNPD expects per-drive traceability, not intent.

Evidence, not intent
GDPR applies directly in the Grand Duchy. The Law of 1 August 2018 organises the CNPD and the national frame. A retired server, a backup tape or a ManCo employee laptop is still a data-bearing asset. Handing it over without erasure or destruction evidence does not close the file.
RecyclicTech issues a certificate per drive or serial. Method: NIST SP 800-88 (Clear, Purge or physical destruction per the briefing). We do not invent a CNPD agrément — the CNPD does not licence ITAD vendors. We produce the file your DPO can show.