Luxembourg has designated the Commission de Surveillance du Secteur Financier (CSSF) as the national market surveillance authority responsible for AI systems operating within the financial services sector, under draft bill no. 847610 implementing the EU AI Act. The CSSF role is sector-specific: it covers AI systems classified as high-risk within financial services, including credit scoring, insurance underwriting, and investment advisory tools. Full enforcement of the EU AI Act in Luxembourg is set for August 2, 2026.
Who it affects: AI developers, deployers, and importers of high-risk AI systems operating in Luxembourg’s financial sector face direct CSSF oversight. Luxembourg-based fintech companies and asset managers deploying automated decision systems are the primary compliance targets. The scope does not cover AI systems outside financial services.
What is notably missing: The designation of CSSF covers only one sector. Luxembourg has not yet published a comprehensive national AI regulatory authority covering all sectors. Draft bill 847610 remains in legislative progress and has not yet been enacted as final law. No AI literacy or training obligations for workers or citizens are created by this governance measure; it addresses systemic risk in AI deployment, not the knowledge divide.