Lithuania Law on Legal Protection of Personal Data (2018)
Lithuania's Law on the Legal Protection of Personal Data (No. I-1374, as restated in 2018) supplements the EU GDPR with national provisions. The State Data Protection Inspectorate (Valstybine duomenu apsaugos inspekcija) oversees enforcement. The law includes provisions for processing of national identification codes (asmens kodas), video surveillance, processing for journalistic purposes, direct marketing, the age of digital consent (14 years), and specific derogations for research and statistics.
Framework summaries on this platform are AI-assisted interpretations for educational and compliance planning purposes. They do not reproduce or replace the official standards. Refer to the authoritative source for the definitive text. Framework names and trademarks belong to their respective organisations.
Framework Domains (22)
Accountability
| Code | Title |
|---|---|
| LT-LPPD-Art-14 | Codes of Conduct and Certification |
Chapter Eight - Liability
| Code | Title |
|---|---|
| Art. 33 | Criminal Offences |
| Art. 34 | Notification of Personal Information Breach |
Chapter Five - Registration of Data Controllers
| Code | Title |
|---|---|
| Art. 26 | Obligations of Deployers of High-Risk AI Systems |
| Art. 27 | Fundamental Rights Impact Assessment for High-Risk AI Systems |
Chapter Four - Security of Data
| Code | Title |
|---|---|
| Art. 24 | Restrictions on Processing Unique Identification Information |
| Art. 25 | Criminal Penalties |
Chapter One - General Provisions
| Code | Title |
|---|---|
| Art. 1 | Open Finance Implementation |
| Art. 2 | Consent Definition |
| Art. 3 | Objectives of Open Finance |
Chapter Seven - State Data Protection Inspectorate
| Code | Title |
|---|---|
| Art. 30 | Privacy Policy |
| Art. 31 | Designation of Chief Privacy Officer |
| Art. 32 | Entry into Force |
Chapter Three - Rights of Data Subjects
| Code | Title |
|---|---|
| Art. 15 | Accuracy, Robustness and Cybersecurity |
| Art. 16 | Obligations of Providers of High-Risk AI Systems |
| Art. 17 | Quality Management System |
| Art. 18 | Documentation Keeping |
Chapter Two - Principles and Conditions for Processing
| Code | Title |
|---|---|
| Art. 10 | Data and Data Governance |
| Art. 11 | Technical Documentation |
| Art. 12 | Record-Keeping |
| Art. 13 | Transparency and Provision of Information to Deployers |
| Art. 5 | Prohibited AI Practices |
| Art. 6 | Writing |
| Art. 7 | Minimum Standards |
Derogations
| Code | Title |
|---|---|
| LT-LPPD-Art-6 | Processing for Journalistic, Academic, Artistic or Literary Purposes |
Employment
| Code | Title |
|---|---|
| LT-LPPD-Art-8 | Processing in the Workplace |
Enforcement
| Code | Title |
|---|---|
| LT-LPPD-Art-13 | Administrative Fines and Penalties |
Governance
| Code | Title |
|---|---|
| LT-LPPD-Art-9 | Data Protection Officer Designation and Reporting |
Incident Response
| Code | Title |
|---|---|
| LT-LPPD-Art-17 | Breach Notification to VDAI |
Lawful Basis
| Code | Title |
|---|---|
| LT-LPPD-Art-3 | Processing of Personal Data of Children |
Marketing
| Code | Title |
|---|---|
| LT-LPPD-Art-20 | Direct Marketing Rules |
Research
| Code | Title |
|---|---|
| LT-LPPD-Art-19 | Processing for Scientific and Historical Research |
Rights
| Code | Title |
|---|---|
| LT-LPPD-Art-12 | Complaints and Investigations Procedure |
| LT-LPPD-Art-15 | Data Subject Rights in Lithuanian |
| LT-LPPD-Art-16 | Restrictions on Data Subject Rights |
Scope
| Code | Title |
|---|---|
| LT-LPPD-Art-1 | Scope and Relationship to GDPR |
Special Categories
| Code | Title |
|---|---|
| LT-LPPD-Art-5 | Processing of Personal Identification Numbers |
Supervisory Authority
| Code | Title |
|---|---|
| LT-LPPD-Art-10 | State Data Protection Inspectorate Powers |
| LT-LPPD-Art-11 | Inspector of Journalist Ethics |
Surveillance
| Code | Title |
|---|---|
| LT-LPPD-Art-7 | Video Surveillance |
Transfers
| Code | Title |
|---|---|
| LT-LPPD-Art-18 | International Transfers Outside the EEA |
Your Compliance Coverage
If you comply with Lithuania Law on Legal Protection of Personal Data (2018), you already cover:
Privacy Act 1988 (Australia)
27%
11 controls mapped
Compare →APPI
24%
10 controls mapped
Compare →Albania Law on Protection of Personal Data (Law No. 9887, 2008, amended 2014)
24%
10 controls mapped
Compare →+ 422 more: Vermont Artificial Intelligence and Consumer Data Act (AICDA) (22%), Azerbaijan Law on Personal Data (2010) (22%)
See all 425 mapped frameworks ↓Maps to 425 other frameworks
Frequently Asked Questions
What is Lithuania Law on Legal Protection of Personal Data (2018)?
Lithuania Law on Legal Protection of Personal Data (2018) is a compliance framework from Lithuania with 22 domains and 41 controls. Lithuania's Law on the Legal Protection of Personal Data (No. I-1374, as restated in 2018) supplements the EU GDPR with national provisions. The State Data Protection Inspectorate (Valstybine duomenu apsaugos inspekcija) oversees enforcement. The law includes provisions for processing of national identification codes (asmens kodas), video surveillance, processing for journalistic purposes, direct marketing, the age of digital consent (14 years), and specific derogations for research and statistics. It is used by organisations to establish and maintain compliance with industry standards and regulatory requirements.
How many controls does Lithuania Law on Legal Protection of Personal Data (2018) have?
Lithuania Law on Legal Protection of Personal Data (2018) has 41 controls organised across 22 domains. The largest domains are Chapter Two - Principles and Conditions for Processing (7 controls), Chapter Three - Rights of Data Subjects (4 controls), Chapter One - General Provisions (3 controls). Each control defines specific requirements that organisations must implement to achieve compliance.
What frameworks does Lithuania Law on Legal Protection of Personal Data (2018) map to?
Lithuania Law on Legal Protection of Personal Data (2018) maps to 425 other compliance frameworks. The top mapping partners are Privacy Act 1988 (Australia) (27% coverage), APPI (24% coverage), Albania Law on Protection of Personal Data (Law No. 9887, 2008, amended 2014) (24% coverage). Use our comparison tool to explore control-level mappings between frameworks.
How do I get started with Lithuania Law on Legal Protection of Personal Data (2018) compliance?
Start your Lithuania Law on Legal Protection of Personal Data (2018) compliance journey by running a self-assessment on our platform to identify your current compliance posture. Our AI advisory can answer specific questions about Lithuania Law on Legal Protection of Personal Data (2018) requirements, and cross-framework mapping helps you leverage existing controls from other frameworks you may already comply with. Create a free account to access all 41 controls and track your progress.
Start Your Compliance Journey
Create a free account to run self-assessments, get AI advisory, and track your compliance progress across 701 frameworks.
Get Started Free →Free forever — no credit card required