Liechtenstein. Comprehensive data protection. Act

DSGData Protection Act of 4 October 2018 (Datenschutzgesetz, DSG), LGBl. 2018 Nr. 272

In force

Partly verified

Medium confidence. In-force date 2019-01-01 inferred from earliest consolidated version. EEA state – GDPR applies.

§1Summary

Synopsis

Implements and supplements the GDPR in Liechtenstein as an EEA state and transposes the Law Enforcement Directive. The Datenschutzstelle supervises compliance.

Key themes

GDPR implementation
national derogations
LED transposition
video surveillance

Unique features

Age of digital consent 16; GDPR applied in Liechtenstein from 20 July 2018 via the EEA Agreement, before the DSG entered force.

SaaS relevance

Applies to SaaS providers in Liechtenstein's financial/fintech sector and those targeting its residents.

§2Obligations

Extraterritorial: Yes
Breach notification: Authority 72h; individuals without undue delay if high risk
DPO: Conditional
Cross-border transfers: GDPR Chapter V (EEA)
Maximum penalty: €20m or 4% global turnover (CHF equivalent)

§3Dates

Key dates

Adopted 4 October 2018
In force 1 January 2019
Amended versions in force 2021-01-01, 2025-02-01, 2026-04-01

§4Text and authority

Text

Authoritative text gesetze.li

Authority

Datenschutzstelle Liechtenstein

§5Where it applies

Domestic law of: Liechtenstein

§6Sources and verification

Sources consulted

Verification

Medium confidence.

Partly verified

Medium confidence. In-force date 2019-01-01 inferred from earliest consolidated version. EEA state – GDPR applies.