Data Protection

Today, most businesses know what the General Data Protection Regulation is, understand its importance, and know what it requires and what it prohibits. Nonetheless, most companies continue to process personal data improperly and fail to comply with the GDPR’s requirements, thus exposing themselves to data-leakage crises and potential fines from supervisors.

Trends show that data protection will be even more strictly enforced going forward, and that sanctions and fines will be even more severe than they are now, so companies who have not already taken care to ensure the security of the personal data they manage should do so now. Our team is ready to assist you by identifying relevant legal risks and helping you satisfy all relevant data-protection requirements.

We provide the following services in the field of data protection:

• Audit. We carry out data-processing audits to help clients assess possible risks.
• Agreements to Process and/or Transfer Personal Data. We have extensive experience in advising large public and private-sector clients on data-transfer and data-processing agreements in accordance with GDPR requirements. We also advise financial institutions and other service providers on data-protection issues related to large IT-services projects.
• Privacy Notices and Compliance Documents. Our lawyers are highly skilled in drafting and reviewing client-privacy notices, including those for children. We also draft privacy policies and other documents related to information management and security issues.
• Personal Data-Security Breaches and Breach Notifications. As personal data-security breaches can have a serious impact on business, we advise clients on how best to avoid them – and how to address them when they do occur, including by drafting breach notifications and submitting them to the State Data Protection Inspectorate.
• Direct Marketing. Our team can help clients organise marketing campaigns to meet GDPR requirements, including the obtaining of valid consent agreements.
• Representation. We represent the interests of our clients in the State Data Protection Inspectorate and in legal disputes regarding personal-data-processing breaches. In addition, we advise clients during investigations of personal-data breaches and prepare mandatory reports for the State Data Protection Inspectorate and data subjects. We also help clients comply with the requirements of Lithuanian law, including the obligation on data controllers to rectify problems to prevent future violations.
• Education. We deliver high-quality trainings on data protection and privacy law.
• Privacy Impact Assessments. We conduct the privacy-impact assessments required by the GDPR, and we help assess the nature and sensitivity of current or planned data-processing operations.