Law note · Lithuania
Law on Legal Protection of Personal Data
The Law on Legal Protection of Personal Data gives the General Data Protection Regulation (GDPR) domestic effect in Lithuania and is enforced by the State Data Protection Inspectorate (Valstybine duomenu apsaugos inspekcija, VDAI), whose title this pass confirmed directly from VDAI's own legislation index.
Two independent secondary legal trackers (DLA Piper, Linklaters) agree that Lithuania sets the digital age of consent for information society services at 14, below the GDPR default of 16, and that VDAI itself issues the authorization for an Article 46(3) cross-border transfer within 20 working days, extendable to 30 in certain cases; neither figure was independently confirmed against the Act's own text, which two fetch attempts (WebFetch and crawler infrastructure) could not retrieve this pass.
What it asks of an app
- Establish a General Data Protection Regulation (GDPR) Article 6 lawful basis before processing personal data of a person in Lithuania, including data collected by crawling.
When LexLint raises it
Declared activities: crawls_web, trains_models, deploys_chatbot
Primary source: VDAI legislation index, vdai.lrv.lt, fetched and read directly (title only)
DLA Piper and Linklaters secondary legal trackers for national specifics, not independently confirmed against primary text