Personal Data Protection – GDPR Compliance and Legal Services
LEAGUS provides legal services in the field of personal data protection and offers advice on the requirements of the General Data Protection Regulation (GDPR) and other laws governing personal data protection in Lithuania. We help companies and organizations ensure the lawful processing of personal data, prepare the necessary documentation, assess risks, and provide advice on data breaches, international data transfers, and other data protection issues.
We aim not only to help resolve emerging data protection issues, but also to prevent potential violations. We develop practical solutions tailored to the specific operations of each organization and help ensure ongoing compliance with GDPR requirements.
Our Services
Preparation of documents related to the protection of personal data
We are drafting privacy policies, internal rules, procedures, and other documents necessary to comply with the GDPR requirements.
Personal Data Processing Agreements
We draft, review, and evaluate personal data processing agreements and provide advice on their application.
Representation before the Data Protection Supervisory Authority
We represent clients before the State Data Protection Inspectorate and in other disputes related to data protection.
International Transfer of Personal Data
We provide advice on the transfer of personal data to third countries and other issues related to international data processing.
Assistance in the Event of Data Security Breaches
We help you assess the situation, develop an action plan, and comply with the reporting requirements set forth in the law.
Data Protection Risk Assessment and Compliance
We conduct data protection risk assessments and offer solutions to help mitigate legal and organizational risks.
Training for Employees and Management
We organize training sessions on GDPR requirements, best practices, and the day-to-day processing of personal data.
Managing Partner
Tadas Kuzminskas
Partner, Attorney
Frequently Asked Questions
Do you help ensure that your organization properly implements the GDPR requirements?
Yes. We advise companies and organizations on the requirements of the General Data Protection Regulation (GDPR), assess their data processing practices, prepare the necessary documentation, and help ensure ongoing compliance with personal data protection requirements.
When is it necessary to enter into a personal data processing agreement?
A personal data processing agreement is generally required when a data controller transfers the processing of personal data to another person or organization acting as a data processor. We provide advice on the relationship between the data controller and the data processor, contractual requirements, and the proper implementation of the requirements of Article 28 of the GDPR.
What should you do if a personal data breach occurs?
When a personal data breach occurs, it is important to assess its nature, scope, and potential risk to the rights and freedoms of individuals as quickly as possible. We help assess the circumstances of the breach, determine the necessary actions, prepare notifications to the supervisory authority, and, where applicable, inform the data subjects. Learn more about preparing for personal data breaches →
Do you organize GDPR training for your employees?
Yes. We organize practical training sessions for employees and management on GDPR requirements, personal data processing, data security, and the most common data protection scenarios encountered in practice. We tailor the training content to the specific activities and needs of each organization. More information about the training →
Do you provide consulting services regarding the international transfer of personal data?
Yes. We provide advice on the transfer of personal data to third countries and the legal requirements for international data transfers, assess the applicable safeguards, and assist in preparing the necessary documentation.
Do you conduct a data protection risk assessment?
Yes. We assess personal data processing operations and the associated risks, help identify potential violations of the GDPR, and recommend legal and organizational measures to mitigate those risks.
What is the balancing test of legitimate interests?
The balancing test of legitimate interests is an assessment used to determine whether the processing of personal data, based on Article 6(1)(f) of the GDPR, is necessary to achieve the legitimate interest pursued and whether that interest is not outweighed by the data subject’s rights and freedoms. The test evaluates the data controller’s legitimate interest, the necessity of the data processing, and the impact on the data subject.
News
Personal Data Breach: 5 Practical Tips Before (or If) an Incident Occurs
A personal data breach can result not only in legal consequences but also in reputational and organizational consequences. It is important for companies not only to respond appropr
Illegal Employment in the Construction Sector: When Does a Certificate of Self-Employment Not Protect Against Liability?
The construction sector is characterized by flexibility—various models of cooperation are widely used here, including service contracts with self-employed individuals. At first g
How much does your colleague earn? The era of secret salaries in Lithuania is coming to an end
How much does your coworker at the next desk earn? In Lithuania, this question is still often considered impolite, and salary figures are a closely guarded secret. However, the sit