Lithuania. Comprehensive data protection. Act
ADTAĮLaw on Legal Protection of Personal Data (Asmens duomenų teisinės apsaugos įstatymas)
In force
Partly verified
Medium confidence. No verification notes recorded.§1Summary
- Synopsis
Lithuania's data protection law supplements the GDPR, splitting supervision between VDAI and the Inspector of Journalist Ethics, and sets rules on employee data, national ID codes and video surveillance.
- Key themes
- Unique features
Age of digital consent (GDPR Art 8): 14. Restrictions on processing personal ID codes and on employee monitoring; public authorities face lower fine caps (up to 0.5% of budget or €30,000).
- SaaS relevance
Applies alongside the GDPR to any SaaS provider established in, or targeting users in, this country; national rules on age of consent, employee data and offences shape onboarding and HR-related features.
§2Obligations
- Extraterritorial
- Limited
- Breach notification
- Authority 72h; individuals without undue delay (GDPR Arts 33-34)
- DPO
- Conditional
- Cross-border transfers
- GDPR Chapter V (adequacy/SCCs/BCRs)
- Maximum penalty
- GDPR Art 83: €20m or 4% global turnover; public bodies lower cap
§3Dates
- Key dates
- Adopted
- In force
- Recast for GDPR by Law No. XIII-1426 (in force 2018-07-16)
§4Text and authority
- Text
- Authoritative text e-tar.lt
- Authority
- Valstybinė duomenų apsaugos inspekcija (VDAI); Inspector of Journalist Ethics for media
§5Where it applies
- Domestic law of
- Lithuania
§6Sources and verification
- Sources consulted
- Verification
Medium confidence.
Partly verified
Medium confidence. No verification notes recorded.