Lithuania — AI Regulations | LawAI Gov Hub

02 JUL 2025 · Other

Lithuanian VDAI monitoring DeepSeek

Primary source (vdai.lrv.lt) dated 7 February 2025 in LT. See linked source for full text.

Secondary evidenceData Privacy & Protection ·CybersecurityIssuing institution: Issuing authority not identified

13 FEB 2025 · Other

Lithuanian parliament staff banned from using DeepSeek on official devices

A ban on using DeepSeek, an AI chatbot developed in China, on devices provided by the office of the Lithuanian parliament Seimas took effect on Wednesday.Â

Secondary evidenceCybersecurity ·Data Privacy & Protection ·Generative AIIssuing institution: Issuing authority not identified

07 FEB 2025 · Working Paper

State Data Protection Inspectorate assessment of DeepSeek's data processing practices

On 7 February 2025, the Lithuanian State Data Protection Inspectorate (VDAI) announced that is monitoring the compliance of the DeepSeek programme with the General Data Protection Regulation and advises individuals to be cautious when sharing personal or sensitive data. The VDAI noted that the European Data Protection Board will discuss the matter in plenary on 11 February 2025 and the VDAI is working with other European data protection authorities to coordinate a response. Concerns include a...

Secondary evidenceNational StrategyIssuing institution: Issuing authority not identified

07 MAR 2024 · Law / Act

State Data Protection Inspectorate investigation into Vinted for allegedly violating General Data Protection Regulation (GDPR)

On 3 July 2024, the Lithuanian State Data Protection Inspectorate (SDPI) issued a ruling concerning its investigation into Vinted over violating the General Data Protection Regulation (GDPR) and imposed a fine of EUR 2'385'276. The fine followed complaints from French and Polish authorities regarding the company's handling of the right to erasure and right of access requests. The investigation found Vinted guilty of unlawful, unfair, and non-transparent data processing practices, including “s...

Secondary evidenceNational StrategyIssuing institution: Issuing authority not identified

17 JUL 2023 · International Agreement

Poland-Lithuania cooperation agreement on cybersecurity

On 17 July 2023, Poland and Lithuania announced the signing of a cooperation agreement to enhance cooperation in cybersecurity, focusing on the exchange of information and combating disinformation. The cooperation agreement aims to counter cyber threats, particularly those aimed at destabilising NATO and the EU and affecting infrastructure. The parties agreed to cooperate on digitalisation, modern technologies, and the development of broadband networks and 5G internet access.

Secondary evidenceNational StrategyIssuing institution: Issuing authority not identified

16 SEP 2022 · Other

Investigation into Revolut's data breach

On 16 September 2022, the State Data Protection Inspectorate (SDPI) announced its investigation into Revolut’s data breach. The investigation was opened after the company notified the authority about a data breach that took place on 11 September 2022. The attack, carried out with social engineering methods, caused the breach of the data of 50’150 customers around the world, including 20’687 in the European Economic Area, whose names, addresses, and e-mails may have been affected. The SDPI not...

Secondary evidenceNational StrategyIssuing institution: Issuing authority not identified

09 MAR 2022 · Other

National Cyber Security Center warning with regards to conflict in Ukraine

On 9 March 2022, the National Cyber Security Center issued a warning about national security threats in Lithuania posed by Russian software. The Center advises companies to avoid using Russian-based firms to host websites, servers, domain registrar, backup, and other IT services.

Secondary evidenceNational StrategyIssuing institution: Issuing authority not identified

29 DEC 2021 · Executive Order

Standard contractual clauses for personal data processing agreements

The State Data Protection Inspectorate of the Republic of Lithuania has approved the standard contractual clauses of personal data processing agreements drafted in accordance with Article 28(8), Article 57(1)(j), and Article 58(3)(g) of the General Data Protection Regulation. These clauses are intended to assist data controllers and data processors in determining what requirements apply to personal data processing agreements entered into between them in accordance with Article 28(3) of the GD...

Secondary evidenceNational StrategyIssuing institution: Issuing authority not identified

Amendments to the Law on Information Society Services (measures to implement EU AI Act / accelerate AI development)

AI law in Lithuania: In January 2025 the Seimas of the Republic of Lithuania adopted targeted amendments to the Law on Information Society Services to align national roles and procedures with the EU Artificial Intelligence Act and to accelerate safe AI development (including an AI regulatory sandbox). The amendments designate the Communications Regulatory Authority (RRT) as the national market surveillance authority and single contact point and the Innovation Agency as the notifying authority for conformity assessment and support the creation of notified bodies, conformity procedures, and market surveillance functions....

Primary legal sourceNational StrategyOfficial source · digital-strategy.ec.europa.eu ↗

National Strategy

AI Regulatory Sandbox Policy

AI law in Lithuania: Lithuania has adopted a national AI regulatory sandbox policy to implement the EU AI Act and accelerate safe AI innovation. The Innovation Agency (Inovacijų agentūra) is designated to operate the sandbox with the Communications Regulatory Authority (RRT) as market surveillance authority, and the initiative includes targeted support for SMEs, access to HPC resources, supervised testing of high-risk systems and reporting obligations under EU law....

Official materialNational StrategyOfficial source · ai-act-service-desk.ec.europa.eu ↗

Amendments implementing the EU Artificial Intelligence Act: Amendments to the Law on Technology and Innovation (XV-105) and the Law on Information Society Services (XV-106) to implement Regulation (EU) 2024/1689 (Lithuanian AI Act implementation amendments)

AI law in Lithuania: 2025 Lithuanian amendments designate national AI authorities, set up an AI sandbox and align national law to the EU AI Act.

Primary legal sourceNational StrategyOfficial source · eur-lex.europa.eu ↗

Amendments to the Law on Technology and Innovation (measures to implement EU AI Act / accelerate AI development)

AI law in Lithuania: Amendments to the Law on Technology and Innovation (adopted 14 January 2025) implement key institutional and practical measures to enable Lithuania to apply the EU Artificial Intelligence Act, accelerate AI development through a national "AI sandbox", and assign national roles for conformity assessment and market surveillance. They revise the definition and support mechanisms for start‑ups and vest new functions in the Innovation Agency and the Communications Regulatory Authority....

Primary legal sourceNational StrategyOfficial source · eur-lex.europa.eu ↗

National Strategy

Lithuanian Artificial Intelligence Strategy: A Vision of the Future

AI law in Lithuania: Published by the Ministry of Economy and Innovation in 2019, "Lithuanian Artificial Intelligence Strategy: A Vision of the Future" sets out national priorities to modernise Lithuania’s AI ecosystem through skills development, research growth, ethical and legal guidance, improved access to data, and public-private cooperation. The strategy is a non-binding national roadmap recommending institutional, funding and regulatory measures to support AI deployment across sectors....

Official materialNational StrategyOfficial source · ai-watch.ec.europa.eu ↗