Support Centre

You have out of 5 free articles left for the month

Signup for a trial to access unlimited content.

Start Trial

Continue reading on DataGuidance with:

Free Member

Limited Articles

Create an account to continue accessing select articles, resources, and guidance notes.

Free Trial

Unlimited Access

Start your free trial to access unlimited articles, resources, guidance notes, and workspaces.

Lithuania: VDAI guidelines provide criteria for assessing requests for provision of personal data

The State Data Protection Inspectorate ('VDAI') published, on 11 November 2020, guidelines for controllers and processors on assessing the lawfulness of requests for the provision of personal data following a public consultation on the same. In particular, the guidelines outline, among other things, the assessment of the legality and reasonable nature of the requests based on the lawfulness of the purpose for such provision, the suitability of the recipient of personal data, the proportionality in light of the amount of data requested, the cases when the General Data Protection Regulation (Regulation (EU) 2016/679) ('GDPR') does not apply to such requests, for instance in the case of deceased persons, as well as the provision of personal data to law enforcement authorities. More specifically to law enforcement authorities, the VDAI highlighted that in the case of a legal act authorising the police to collect data for purposes such as criminal investigations, the data controller must not execute such a request for provision of data without first determining its legality.

You can read the press release here and the guidelines here, both only available in Lithuanian.