Lithuania. ePrivacy / marketing. Act

ERĮLaw on Electronic Communications (Elektroninių ryšių įstatymas)

In force
Partly verifiedMedium confidence. e-tar deep link and cookie article number not verified.

§1Summary

Synopsis

Lithuania's Law on Electronic Communications implements the ePrivacy cookie consent rule and direct marketing restrictions. B2C marketing still needs prior consent.

Key themes
  • cookies/terminal equipment consent
  • direct marketing
  • soft opt-in
  • traffic and location data
Unique features

From 1 July 2026 electronic marketing to legal entities no longer needs prior consent, only a working opt-out – a notable liberalisation.

SaaS relevance

Any SaaS website, app or product that sets non-essential cookies/SDKs or sends marketing emails/SMS to users in this country needs prior consent (subject to exemptions) under this law, regardless of where the provider is based.

§2Obligations

Extraterritorial
Yes
Breach notification
Telecom providers: authority notification under Reg 611/2013; otherwise GDPR
DPO
No
Cross-border transfers
None
Maximum penalty
National cookie fines €150–€1,150 (Code of Administrative Offences); GDPR fines

§3Dates

Key dates
  • Adopted
  • In force
  • Direct marketing Art 81 amended 2026-04-16, applicable from 2026-07-01: B2B e-mail/SMS marketing moved to opt-out

§4Text and authority

Text
Authority
Valstybinė duomenų apsaugos inspekcija (VDAI) for cookies/marketing; Communications Regulatory Authority (RRT) for telecom

§5Where it applies

Domestic law of
Lithuania

§6Sources and verification

Sources consulted
Verification

Medium confidence.

Partly verifiedMedium confidence. e-tar deep link and cookie article number not verified.