Law on Legal Protection of Personal Data

Republic of Lithuania Law No. XIII-1426, in force 16 July 2018 (as amended)

A citation is an address, not a summary. The first part names the law; what follows narrows it to the exact section, article or paragraph.

What follows is LexLint's own research summary of this law, not legal advice.

In force since 16 July 2018.

A comprehensive regime rule binding public and private bodies.

As of 24 August 2026.

What it requires

Establish a General Data Protection Regulation (GDPR) Article 6 lawful basis before processing personal data of a person in Lithuania, including data collected by crawling.

What this law does

Drafted with AI from the cited sources under the direction of UnGovr staff. UnGovr holds editorial responsibility for this page.

The Law on Legal Protection of Personal Data gives the General Data Protection Regulation (GDPR) domestic effect in Lithuania and is enforced by the State Data Protection Inspectorate (Valstybine duomenu apsaugos inspekcija, VDAI), whose title is confirmed directly from VDAI's own legislation index.

Two independent secondary legal trackers (DLA Piper, Linklaters) agree that Lithuania sets the digital age of consent for information society services at 14, below the GDPR default of 16, and that VDAI itself issues the authorization for an Article 46(3) cross-border transfer within 20 working days, extendable to 30 in certain cases; neither figure is independently confirmed against the Act's own text, which the gazette's URL does not serve.

When LexLint raises it

crawls_web
trains_models
deploys_chatbot

Read the law

VDAI legislation index, vdai.lrv.lt (title only)
DLA Piper and Linklaters secondary legal trackers for national specifics, not independently confirmed against primary text

Every line above is drawn from the primary source linked here, read on the date shown. This is a research summary, not legal advice.

Back to the example · Lint your app