Lithuania ADTAI Articles 9 + 14 Governance and Accountability. Article 9 Data Protection Officer Designation and Reporting (Duomenu apsaugos pareigunas - DAP) - GDPR Article 37 mandatory designation criteria + Lithuanian additional designation requirements: (a) public authorities; (b) core activities consisting of systematic monitoring on large scale; (c) core activities involving processing of special categories or criminal record data on large scale; (d) Lithuanian-specific: organisations processing personal data of 5,000+ data subjects systematically + financial sector entities + healthcare entities + social insurance entities + education entities of significant size. DAP qualifications + professional experience + Lithuanian Data Protection Officer Association continuing professional development + ITAA (IT Auditors Association) coordination + ISO 27701 Lead Implementer/Auditor credentials encouraged + VDAI DAP notification within 1 month of designation + DAP contact published + reporting to highest management + independence + no conflict of interest + sufficient resources + VDAI DAP public register. Article 14 Codes of Conduct and Certification (Elgesio kodeksai ir sertifikavimas) - voluntary VDAI-approved sectoral codes + EDPB consistency mechanism for cross-border codes + Lithuanian Banking Association Code of Conduct + Lithuanian Insurers Association Code + Lithuanian Hospitals Code + Telecom Code + ISO 27701 ISMS-P + Europrivacy + EDPB-approved schemes + certification body accreditation by Lithuanian National Accreditation Bureau.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.