Detailed overview
Lithuania is regulated by the EU AI Act. Lithuanian AI providers and deployers must classify AI systems under the EU AI Act and comply with the relevant obligations for prohibited AI, high-risk AI, transparency-risk AI and general-purpose AI models.
High-risk AI includes systems used in areas such as employment, education, access to essential services, creditworthiness, insurance risk assessment, critical infrastructure, biometric identification, law enforcement, migration, border control and justice. Providers of high-risk AI must build a compliance framework before placing the system on the market or putting it into service. Deployers must use the system properly, maintain human oversight and monitor the AI system's operation.
Lithuania has also drawn up National AI Strategic Guidelines for 2026–2035. The Ministry of the Economy and Innovation states that these guidelines are intended to move Lithuania from isolated AI initiatives to a coordinated nationwide AI ecosystem. The Innovation Agency will prepare an action plan with measures on empowering people, developing secure AI, ensuring technological infrastructure and data, using AI for the public good and driving the Lithuanian economy.
The Lithuanian AI guidelines identify four priority areas. The first is AI competencies and empowering people. The second is AI technology infrastructure and data, including government cloud services, high-speed computing, data architecture, common data models and certified datasets. The third is AI for the public good, including public welfare, human rights, security and prevention of abuse. The fourth is AI as a driver of the economy, supported by access to quality data, infrastructure, public demand for reliable AI solutions and improved e-services.
AI systems in Lithuania may also trigger GDPR, cybersecurity, employment, consumer, financial, healthcare, public-sector and sector-specific requirements. AI used by public authorities, employers, financial institutions, healthcare providers or platforms handling personal data should be assessed under both the EU AI Act and Lithuanian sectoral law.
Penalties for AI Act breaches follow the EU framework. Breaches of prohibited AI rules may reach EUR 35 million or 7% of worldwide annual turnover. Other major operator breaches may reach EUR 15 million or 3%, while misleading information to authorities may reach EUR 7.5 million or 1%.
Practical requirements & details
Sourced from Regulation (EU) 2024/1689 (the EU AI Act) and Lithuania's National AI Strategic Guidelines 2026–2035.
EU AI Act classifications
- Prohibited AI — banned.
- High-risk AI — strict compliance framework before market placement or service launch.
- Transparency-risk AI — disclosure duties.
- GPAI models — documentation, transparency and copyright-policy duties.
High-risk areas
- Employment, education, access to essential services, creditworthiness, insurance risk assessment, critical infrastructure, biometric identification, law enforcement, migration, border control and justice.
Deployer duties
- Use the system properly, maintain human oversight and monitor AI operation.
National AI Strategic Guidelines 2026–2035
- Coordinated nationwide AI ecosystem (vs. isolated initiatives).
- Innovation Agency to prepare action plan: empowering people, secure AI, infrastructure and data, AI for public good and economic AI.
Four priority areas
- AI competencies & empowering people.
- AI technology infrastructure and data — government cloud, high-speed computing, data architecture, common data models, certified datasets.
- AI for the public good — public welfare, human rights, security, prevention of abuse.
- AI as a driver of the economy — quality data, infrastructure, public demand for reliable AI, improved e-services.
Overlapping legal regimes
- GDPR, cybersecurity, employment, consumer, financial, healthcare, public-sector and sector-specific requirements.
Penalties
- EUR 35 million or 7% of worldwide annual turnover — breaches of prohibited AI rules.
- EUR 15 million or 3% of worldwide annual turnover — breaches of many other AI Act operator obligations.
- EUR 7.5 million or 1% of worldwide annual turnover — supplying incorrect, incomplete or misleading information to authorities.
Related entries
See also the European Union entry, which covers the EU AI Act (Regulation (EU) 2024/1689) — the substantive framework that this jurisdiction implements and supervises domestically.