Centre processes personal data in accordance with the procedure established in the Law on Legal
Protection of Personal Data;
16) in cooperation with business entities, research and education institutions and cyber
security entities, develops projects which strengthen the national cyber security;
17) fulfils the functions set forth in legal acts of the Republic of Lithuania in the field of
cyber security assurance.
Article 9. Powers of the State Data Protection Inspectorate in the field of cyber
security
The State Data Protection Inspectorate implements the cyber security policy in the field
of protection of personal data and fulfils the tasks established by the supervisory authority in
accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27
April 2016 on the protection of natural persons with regard to the processing of personal data
and on the free movement of such data, and repealing Directive 95/46/EC (General Data
Protection Regulation) (OJ 2016 L 119, p. 1).
Article 10. Powers of the Police in the field of cyber security
When implementing the prevention of cyber incidents which possibly have constituent
elements of criminal offences and when conducting their investigation, the Police:
1) collects, analyses and summarises information about cyber incidents which possibly
have constituent elements of criminal offences;
2) establishes the procedure for the provision of information by cyber security entities to
the police which is required to prevent and investigate cyber incidents which might have
constituent elements of criminal offences;
3) where the service provider allegedly participates in or the communications and
information technology equipment it uses is allegedly used for criminal offences, has the right
without a court sanction to order the provider of public communications networks and/or public
digital communications service providers, digital information hosting service providers and
digital service providers to limit the provision of public communications networks and/or public
electronic communications services, digital information hosting services and digital services to
the recipient of services for no longer than 48 hours, and for a longer period – where the
sanction of the district court is available and/or to order the service provider to apply measures
which help remove the reasons for criminal offences in cyber space. In such cases the chairman
of the district court or a judge authorised by him is provided with an offering with regard to the
confirmation of lawfulness or reasonableness of actions on the basis of a reasoned ruling. Should