Sanction RGPD Lithuanian Data Protection Authority (VDAI) — Vilnius City Municipality Administration : 15 k€ (2020)
- Autorité de contrôle
- Lithuanian Data Protection Authority (VDAI)
- Pays
- Lituanie
- Entreprise / secteur
- Vilnius City Municipality Administration
- Montant de l'amende
- 15 k€
- Date de la décision
- 21 octobre 2020
- Fondement juridique
- Art. 5 (1) d), Art. 5 (1) f)
- Manquement
- Non-respect des principes de traitement
Résumé des faits
During the data synchronization of the Population Information System of the Municipal Administration with the databases of the State Centre for Business Registers, the personal data of an applicant for the fostering of an adopted child was replaced, due to an error, with the personal data of the biological parents, which were subsequently accessible in the Population Register of the Republic of Lithuania. This constituted a violation of the principles of integrity and confidentiality of personal data processing (Art. 5 (1) f) GDPR) and a violation of the principle of accuracy.