GDPR Chapter V and VDAI Article 46(3) Authorization, Cross-Border Transfer from Lithuania

Regulation (EU) 2016/679, Arts. 44-50

A citation is an address, not a summary. The first part names the law; what follows narrows it to the exact section, article or paragraph.

What follows is LexLint's own research summary of this law, not legal advice.

In force since 25 May 2018.

A cross border transfer rule binding public and private bodies.

As of 24 August 2026.

What it requires

Rely on a European Commission adequacy decision, Standard Contractual Clauses with a transfer impact assessment, Binding Corporate Rules, or a narrow Article 49 derogation before moving personal data of a person in Lithuania outside the European Economic Area.
Allow for a VDAI authorization step, reported by secondary sources at up to 20 to 30 working days, where a transfer instead relies on Article 46(3) ad hoc contractual clauses or administrative arrangements.

Who checks it

Audit expectation

continuous

Who audits it

Self

Where the report goes

Produced on request

What this law does

Drafted with AI from the cited sources under the direction of UnGovr staff. UnGovr holds editorial responsibility for this page.

Transferring personal data of a person in Lithuania outside the European Economic Area requires a European Commission adequacy decision, Standard Contractual Clauses, Binding Corporate Rules, or a narrow Article 49 derogation, backed by the Article 83(5) top fine tier.

Two independent secondary trackers (DLA Piper, Linklaters) agree that Lithuania adds a national procedural layer: VDAI itself issues the authorization for a transfer based on Article 46(3) ad hoc contractual clauses or administrative arrangements, reported as taking up to 20 working days and, in certain cases, up to 30; not independently confirmed against the Act's own text.

When LexLint raises it

crawls_web
trains_models
deploys_chatbot

Read the law

Official Journal text, EUR-Lex, Regulation (EU) 2016/679
DLA Piper and Linklaters secondary legal trackers for the VDAI authorization procedure, not independently confirmed against primary text

Every line above is drawn from the primary source linked here, read on the date shown. This is a research summary, not legal advice.

Back to the example · Lint your app