Lithuania: Law on Cyber Security
The Lithuanian government passes the Law on Cyber Security to ensure the security and protection of critical information infrastructure in the country. The law mandates that public and private sector entities, including essential infrastructure operators, establish and maintain effective cybersecurity measures to protect their networks and systems from cyber threats.
The law establishes the National Cyber Security Center as the central Authority responsible for implementing and enforcing the law. The center is tasked with providing technical support and guidance to organizations covered by the law, conducting cybersecurity audits and assessments, and responding to cyber incidents.
The law has been praised for promoting cybersecurity and protecting critical information infrastructure in Lithuania. However, some critics have raised concerns about the potential for the law to be used to infringe on civil liberties and for its lack of clarity in some areas. The law has been amended several times since it was first introduced to address some of these concerns and to keep up with technological developments and changes in the cyber threat landscape.
CHAPTER I: GENERAL PROVISIONS
Article 1 – Purpose and Application of the Law
Article 2 – Definitions
Article 3 – Cyber Security Principles
CHAPTER II: DEVELOPMENT AND IMPLEMENTATION OF CYBER SECURITY POLICY
Article 4 – Authorities Developing and Implementing Cyber Security Policy
Article 5 – Powers of the Government in the field of cyber security
Article 6 – Powers of the Ministry of National Defence in the field of cyber security
Article 7 – Cyber Security Council
Article 8 – National Cyber Security Centre
Article 9 – Powers of the State Data Protection Inspectorate in the field of cyber security
Article 10 – Powers of the Police in the field of cyber security
CHAPTER III: OBLIGATIONS OF CYBER SECURITY ENTITIES
Article 11 – General duties of cyber security entities
Article 12 – Special duties of cyber security entities
CHAPTER IV: EXCHANGE OF INFORMATION AND INTERINSTITUTIONAL COOPERATION
Article 13 – Cyber Security Information Network
Article 14 – Inter-institutional cooperation in managing and investigating cyber incidents
Article 15 – Information Protection
CHAPTER V: FINAL PROVISIONS
Article 16 – Voluntary reporting about cyber incidents
