Skip to content

Knowledge

CNPD and media destruction: what internal audit expects in Luxembourg

A recycling ticket is not a certificate. The CNPD expects per-drive traceability, not intent.

Salle serveurs d’un fonds à Kirchberg prête pour enlèvement IT et destruction conforme CNPD

Evidence, not intent

GDPR applies directly in the Grand Duchy. The Law of 1 August 2018 organises the CNPD and the national frame. A retired server, a backup tape or a ManCo employee laptop is still a data-bearing asset. Handing it over without erasure or destruction evidence does not close the file.

RecyclicTech issues a certificate per drive or serial. Method: NIST SP 800-88 (Clear, Purge or physical destruction per the briefing). We do not invent a CNPD agrément — the CNPD does not licence ITAD vendors. We produce the file your DPO can show.