Frequently Asked Questions

Re-use of data refers to the possibility of using anonymised or pseudonymised data that was initially collected or produced by one or more public sector bodies as part of their public tasks.

Re-use allows for public sector data to be used for new and innovative initiatives, whether they are economic, scientific, or of general interest.

Any natural or legal person (including a public administration, a municipality, etc.), whether acting for research, innovation, economic purposes, or non-profit activities, provided they pursue one of the purposes authorised by the Law of 19 December 2025 creating the Government Commission for Data Sovereignty.

Are you a researcher, a start-up, a company, a public administration, or a citizen interested in leveraging data held by public sector bodies?

If so, you can submit an application for re-use of data.

The Re-use of data held by public sector bodies is subject to the condition that it is carried out for one or more of the following purposes:

• Statistical Analysis
  Statistical analysis includes all re-use operations necessary for statistical surveys or the production of statistical results (e.g., unemployment rate statistics, socio-economic indicators), regardless of how these aggregated results are used, provided that neither the results nor the re-used data are used to support measures or decisions concerning an individual person.

• Educational, Training or Teaching Activities
  This includes activities at vocational or higher education levels. These activities cover developing and exploring teaching methods and course materials.

• Scientific Research
  Under applicable regulations and in line with legislative intent, the concept of 'scientific research' should be interpreted broadly and includes, among others:
  • development and demonstration of technologies,
  • fundamental research,
  • applied research,
  • research in the general or public interest,
  • research funded by the private sector,
  • studies conducted in the public interest in the field of public health,
  • innovation activities, such as training artificial intelligence algorithms,
  • evaluation and further development of algorithms,
  • evaluation and further development of products.

• Historical research
  This includes historical research and research for genealogical purposes.

• Evaluation of Luxembourg or European Public Policies
  Public policy evaluation might include analysis of:
  • whether the objectives set at the time of adopting a rule have been achieved,
  • whether the resources mobilised by public authorities are effective and proportionate,
  • how the relevance, efficiency and coherence of public actions can be improved,
  • the impact of public policies (e.g., health, mobility, environment), including comparisons with other Member States,
  • how existing public policies are perceived and, where appropriate, might be adjusted.

In the Public Sector Data Catalogue

Explore the Public Sector Data Catalogue to discover datasets available for re-use upon application.

Directly with the public sector bodies

If the datasets you need are not yet listed in the Public Sector Data Catalogue, you can contact the public sector bodies directly to explore availability and re-use options.
 

Not sure which public sector body holds the data? Contact the Ministry for Digitalisation

The Government Commission for Data Sovereignty will in principle adopt a decision within two months of receipt of a complete application for re-use of data.
 

In case an application is exceptionally detailed and complex, this period may be extended by a maximum of thirty days. The applicant will be informed of the extension and the reasons for it.
 

The processing time of an application may also be longer, if the Government Commission for Data Sovereignty must request additional information to adopt a decision.

The Luxembourg Data Authority of the Government Commission for Data Sovereignty is responsible for processing applications for re-use of data.

The re-use of data takes place in a Secure Processing Environment provided by the Government Commission for Data Sovereignty, a digital space designed to ensure secure use of the data and compliance with the regulatory framework in force, with the aim of protecting the data.
 

Use of the Secure Processing Environment is subject to the general terms of use.
 

For more information on using the Secure Processing Environment, please consult the User Guide.

The Secure Processing Environment provides a high-performance, state-of-the-art technical framework for secure data handling, including:

• A personalised workspace – a configurable virtual environment with role-based access rights.
• Scalable computing power – advanced resources for running statistical models, simulations, and AI algorithms.
• Integrated analysis tools – pre-installed software for data visualisation, statistical analysis, and machine learning.
• Encrypted storage – secure space for intermediate results, derived data, and peer review.

Built on strict technical and legal standards, the Government Commission for Data Sovereignty’s Secure Processing Environment facilitates compliance with EU regulations, including the DGA and the GDPR. Key security measures include:

• Restricted access – only authorised users can access the Secure Processing Environment.
• Strong authentication – multi-factor identity verification for every login.
• Controlled data flows – no data or technology enters or leaves without prior approval.
• Full traceability – every action is logged for transparency and compliance.
• Confidentiality – data is anonymised, pseudonymised and/or aggregated before being made available, with safeguards in place to prevent re-identification and to protect the data, including data protected by trade secret, commercial confidentiality or intellectual property rights.
• Lifecycle management – data is processed according to recognised standards and best practices.

GDPR formalities – the Secure Processing Environment was assessed during the legislative process as part of a general data protection impact assessment. There is no need to re-evaluate the technical measures—just focus on your own project.

Access to the Secure Processing Environment is restricted to users specifically authorised by the Government Commission for Data Sovereignty.

How are users designated?
When submitting an application for re-use of data, the applicant must indicate by name the individuals who will be using the Secure Processing Environment. This list, limited to a maximum of ten users, is subject to approval by the Government Commission for Data Sovereignty.

Only the individuals on this list validated by the Government Commission for Data Sovereignty will be authorised to access the Secure Processing Environment.