Lithuania

Vilnius City Municipality Administration

15,000 €

GDPR enforcement action by Lithuanian Data Protection Authority (VDAI) on 2020-10-21.

Rank · Sector

#145

of 357 in Public Sector and Education

Rank · Lithuania

of 15

Rank · All fines

#1,180

of 3,050

Case details

Authority: Lithuanian Data Protection Authority (VDAI)
Date: 2020-10-21
Controller / Processor: Vilnius City Municipality Administration
Sector: Public Sector and Education
Quoted Articles: Art. 5 (1) d) GDPR, Art. 5 (1) f) GDPR
Type of violation: Non-compliance with general data processing principles

Summary

During the data synchronization of the Population Information System of the Municipal Administration with the databases of the State Centre for Business Registers, the personal data of an applicant for the fostering of an adopted child was replaced, due to an error, with the personal data of the biological parents, which were subsequently accessible in the Population Register of the Republic of Lithuania. This constituted a violation of the principles of integrity and confidentiality of personal data processing (Art. 5 (1) f) GDPR) and a violation of the principle of accuracy.

Open original source Links to the regulator's original publication or another source.