Lithuania

Company

8,000 €

GDPR enforcement action by Lithuanian Data Protection Authority (VDAI) on 2023-01-24.

Rank · Sector

#152

of 270 in Health Care

Rank · Lithuania

#13

of 15

Rank · All fines

#1,520

of 3,050

Case details

Authority: Lithuanian Data Protection Authority (VDAI)
Date: 2023-01-24
Controller / Processor: Company
Sector: Health Care
Quoted Articles: Art. 5 (1) a) GDPR, Art. 15 (1) a), b), c), d), g) GDPR, Art. 15 (3) GDPR
Type of violation: Insufficient fulfilment of data subjects rights

Summary

The Lithuanian DPA has fined a company EUR 8, 000. The controller failed ot properly fulfil the data subject's right to access their personal data processed by the company. The controller partially provided information about the processing of the data subject's personal data, but the data subject was not given the opportunity to verify the legal basis (or bases) for the processing of their personal data, the specific data being processed, the purposes of processing, the retention period, etc.

Open original source Links to the regulator's original publication or another source.