Although with a slight delay, Lithuania adopted a new wording of the Law on Legal Protection of Personal Data on 30 June 2018 (the Law on Protection of Personal Data). Almost a year later, on 16 May 2019 the first fine of €61,500 was imposed for breaches of three articles of the General Data Protection Regulation (GDPR).

These past two years have been a landmark for data protection in Lithuania. In the past year the Lithuanian State Data Protection Inspectorate (the SDPI) has focused on the implementation of personal data protection reform. This article focuses on how Lithuania implemented the GDPR and on the regulatory environment.