All dossiers

10 written questions · 2019–2026 · last question 23 Mar 2026

Data retention, state trojans and spyware

Questions on how often retained telecom data and state trojans are used, and on Luxembourg's response to CJEU case law. Later questions ask about links to spyware and surveillance vendors (Pegasus/NSO, Palantir).

Outcome so far

The data retention bill (PL 8148) was tabled on 8 February 2023 and is still before the Justice committee. The government says the State has no contracts with Palantir and no knowledge of Pegasus sales to Togo through Luxembourg entities.

Status

Bill PL 8148 pending in the Justice commission.

What I'm asking next

Legislative timetable for PL 8148 and usage statistics for article 88-1 and 67-1 measures.

The questions

Newest first. Each question links to the full text and the government's answer on chd.lu (in French); the summaries are ours. Question numbers restart with each legislature.

  1. · QP 3833 · to Lex Delles

    Activités du NSO Group au Luxembourg et liens éventuels avec le Togo

    Answer: No knowledge of Pegasus sales to Togo via Luxembourg entities; no export-control requests received since 2021.

  2. · QP 2747 · to Léon Gloden

    Usage éventuel de services Palantir par l'État luxembourgeois

    Answer: The state has no contracts with Palantir.

  3. · QP 7867 · to Xavier Bettel

    Logiciels espions au Luxembourg

    Answer: Reproduces the government's replies to the European Commission spyware questionnaire.

  4. · QP 7236 · to Sam Tanson

    Conservation des données

    Answer: Consultations nearly finished; bill to go to government council early next year.

  5. · QP 5349 · to Sam Tanson

    La conservation des données

    Answer: Luxembourg prefers a common EU framework compliant with CJEU case law.

  6. · QP 4692 · to Xavier Bettel

    Le logiciel Pegasus

    Answer: SRE law excludes any internal political surveillance.

  7. · QP 4693 · to Xavier Bettel

    La conservation de données

    Answer: Not possible to say how often retained data was accessed in 10 years.

  8. · QP 3201 · to Xavier Bettel

    Le cheval de Troie de l'État

    Answer: State trojans used by police under art. 88-1 CPP and by the SRE under its own law.

  9. · QP 1783 · to Sam Tanson

    La législation concernant la conservation des données

    Answer: Discusses pending CJEU cases and their impact on national law.

  10. · QP 813 · to Félix Braz

    La conservation des données

    Answer: Describes the framework derived from directive 2006/24/CE.