Lithuania

Europe

Active Alerts

Tracked Regulations

GDPR (General Data Protection Regulation)

data-privacy

Lawful basis for processing personal data of EU residents
Data subject rights: access, rectification, erasure, portability, objection
Data Protection Impact Assessments (DPIAs) for high-risk processing
+4 more requirements

Up to EUR 20 million or 4% of global annual turnover, whichever is higher

NIS2 Directive

cybersecurity

Risk management measures for network and information systems
Incident reporting: 24h early warning, 72h notification to CSIRT
Supply chain security assessments
+3 more requirements

Deadline: 2024-10-17Up to EUR 10 million or 2% of global annual turnover for essential entities; EUR...

CSRD (Corporate Sustainability Reporting Directive)

esg

Double materiality assessment (impact materiality + financial materiality)
Report against ESRS (European Sustainability Reporting Standards) - 12 standards
Digital tagging in XHTML with iXBRL markup
+4 more requirements

Deadline: 2025-01-01Determined by EU member states; may include fines, public reprimand, and reporti...

Recent Regulatory Alerts

Lithuania Implements EU Pay Transparency Directive with Strict Obligations

HIGH

hr-compliance

Lithuania has transposed the EU Pay Transparency Directive via Law No. XV-969, applying to all employers regardless of size. Employers must submit monthly pay data to SoDRA starting January 1, 2027, and align compensation systems by December 31, 2026.

Lithuania Law No. XV-969 (EU Pay Transparency Directive)Lithuanian Parliament (Seimas) and State Social Insurance Fund Board (SoDRA)August 23, 2026Source

Lithuanian DPA Complaint Against Whitebridge AI for GDPR Violations

MEDIUM

No articles specifically tagged for Lithuania yet. Check our blog for general compliance coverage.

noyb has filed a complaint with the Lithuanian Data Protection Authority against Whitebridge AI for multiple GDPR violations, including scraping and selling personal data without a legal basis and charging for access to data that should be free under Article 15. This enforcement action signals increased regulatory scrutiny of AI companies processing personal data and highlights the need for compliance with GDPR requirements for data scraping and subject rights.