Republic of LithuaniaState Data Protection Inspectorate

Development of the Data Protection

in the Republic of Lithuania

8th Meeting of Central and Eastern European Commissioners

Euxinograde (Varna), 25-26 May 2006

Republic of LithuaniaState Data Protection Inspectorate

Legislation• Rules on performing inspections on

communications confidentiality approved by Government Resolution No 807 (20 July 2005)

• Requirements for the itemised bills aproved by Director order No 1T-95 (5 July 2005)

Republic of LithuaniaState Data Protection Inspectorate

Legislation

• Regulations of the State Register of Personal Data Controllers and Rules of Notification by Data Controllers of Processing of Data amended by Government Resolution No 1317 (7 December 2005)

Republic of LithuaniaState Data Protection Inspectorate

Recommendation on the processing of personal data performing historic research:

1) A person carrying out a research may collect them from all legitimately available sources;

2) The data collected for the purposes of scientific research may not be used for any other purposes;

3) Personal data collected shall not be excessive than needed to attain the purpose of the determined and approved Research;

4) In carrying out a Research it shall be ensured proper technical and organizational measures;

Republic of LithuaniaState Data Protection Inspectorate

Recommendation on the processing of personal data performing historic research:

5) Researcher must provide the data subject with information adequate for expressing data subject’s will (about conducted Research, expected amount of personal data, the sources, the nature of the Research, its tasks, institution and etc.);

6) Personal data for the purpose of Research shall be processed in the manner not violating the rights of the data subject.

Republic of LithuaniaState Data Protection Inspectorate

Recommendation on the protection of personal data sending bills of providing services:

1) The bills for the services rendered must be individualized, e.g. taxes assessed for each inhabitant separately may not be indicated in a joint billing sheet;

2) The bills for rendered services may not be provided publicly, e.g. placed on the notice board of the apartment house;

Republic of LithuaniaState Data Protection Inspectorate

Recommendation on the protection of personal data sending bills of providing services:

3) The bills to the inhabitants, when data controller provides them throwing them directly into the mailboxes, should be bended and pasted or clipped or posted in the envelope;

4) The data controller may provide bills of open text if they are personally handed in.

Republic of LithuaniaState Data Protection Inspectorate

Draft Law of Amendment of Law on Legal

Protection of Personal Data

• establishes the provisions restricting the nowadays too wide-ranging processing of a personal identification number;

• defines the concept of video surveillance and regulates the processing of personal data by means of video surveillance and fixing equipment;

• determines the procedure of persons’ complaints handling;

Republic of LithuaniaState Data Protection Inspectorate

Draft Law of Amendment of Law on Legal

Protection of Personal Data • determines the legal status of a person or subdivision

responsible for the data protection;

• specifies some provisions of the Law on Legal Protection of Personal Data according to the recommendations issued by the experts of PHARE Twinning project.

In May 2006 the Draft Law was approved by the Government and it was submitted to the Parliament for consideration.

Republic of LithuaniaState Data Protection Inspectorate

Thank you for your attention