Lithuania ADTAI Articles 17-18 Security + Breach Notification + International Transfers. Article 17 Breach Notification to VDAI (Pranesimas apie asmens duomenu saugumo pazeidima VDAI) - GDPR Article 33 implementation + controller must notify VDAI within 72 hours of becoming aware where likely to result in risk to rights and freedoms + notify affected data subjects without undue delay where likely high-risk + content (nature + categories + approximate number + likely consequences + measures taken or proposed + DPO contact). VDAI online breach notification portal + sectoral additional notification for: financial sector to Bank of Lithuania + healthcare to Ministry of Health + telecommunications to RRT (Communications Regulatory Authority) + critical infrastructure to NKSC (National Cyber Security Centre) + Police for criminal aspects + sectoral notifications parallel to VDAI. Article 18 International Data Transfers Outside the EEA (Asmens duomenu perdavimas i trecias salis) - GDPR Chapter V implementation: (a) destination jurisdiction provides adequate level of protection (EU adequacy decisions list - automatic recognition); (b) appropriate safeguards including 2021 EU SCCs (Decision 2021/914) + Binding Corporate Rules VDAI-approved via EDPB consistency mechanism + Codes of Conduct + Certification; (c) derogations including explicit consent + performance of contract + public interest + legal claims + vital interests + register-based + limited transfers. Schrems II Transfer Impact Assessment + EU-US Data Privacy Framework 2023 + Lithuanian-Belarusian-Russian cross-border considerations (sanctioned jurisdictions) + Lithuanian-Ukrainian cooperation post-2022 + EU Eastern Partnership countries.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.