Description

State Data Protection Inspectorate approves standard contractual clauses

The State Data Protection Inspectorate of the Republic of Lithuania has approved the standard contractual clauses of personal data processing agreements drafted in accordance with Article 28(8), Article 57(1)(j), and Article 58(3)(g) of the General Data Protection Regulation. These clauses are intended to assist data controllers and data processors in determining what requirements apply to personal data processing agreements entered into between them in accordance with Article 28(3) of the GDPR, highlighting the significance of data subjects asserting their rights, reducing personal data protection risks, the relationship between the data controller and the data processor, and the clarity of respective rights and duties.

Original source

Scope

Policy Area
Data governance
Policy Instrument
Cross-border data transfer regulation
Regulated Economic Activity
cross-cutting
Implementation Level
national
Government Branch
executive
Government Body
data protection authority

Complete timeline of this policy change

Hide details
2021-12-29
adopted

The State Data Protection Inspectorate of the Republic of Lithuania has approved the standard contr…

Key regulatory dimensions

Regulated subjects

The businesses, government agencies or individuals affected by this policy or regulatory change.
producer / supplier
1
Type Private organisation
Economic activity cross-cutting
Category All

Policy change by business practice

The detailed activities within the scope of this policy or regulatory change.
personal data (all forms): transfer (any destination)
Regulatory tool
Risk or other impact assessment requirement
Regulator notification requirement
Registration requirement
Standard contractual clauses requirement
Sanctions
Determined by existing law or regulation
Suspension of business
Regulated subjects
1
personal data (all forms): data collection
Regulatory tool
Sanctions
Determined by existing law or regulation
Suspension of business
Regulated subjects
1
personal data (all forms): data processing
Regulatory tool
Risk or other impact assessment requirement
Sanctions
Determined by existing law or regulation
Suspension of business
Regulated subjects
1

Policy change by business practice

The detailed activities within the scope of this policy or regulatory change.

personal data (all forms): transfer (any destination)

personal data (all forms): data collection

personal data (all forms): data processing