Lithuania

Registrų Centras

15,000 €

GDPR enforcement action by Lithuanian Data Protection Authority (VDAI) on 2021-03-02.

Rank · Sector

#146

of 357 in Public Sector and Education

Rank · Lithuania

of 15

Rank · All fines

#1,183

of 3,050

Case details

Authority: Lithuanian Data Protection Authority (VDAI)
Date: 2021-03-02
Controller / Processor: Registrų Centras
Sector: Public Sector and Education
Quoted Articles: Art. 32 (1) b), c) GDPR
Type of violation: Insufficient technical and organisational measures to ensure information security

Summary

The Lithuanian DPA (VDAI) imposed a fine of EUR 15,000 on Registrų Centras. The controller is a company which manages several Lithuanian registers. The company suffered a data breach that affected 22 of these registers. During its investigation, the DPA found that the controller had not implemented adequate technical and organizational measures to protect the processing of personal data. The measures implemented by the controller were clearly not sufficient to ensure the continuous integrity, availability and resilience of the data, nor to restore the availability of the data after incidents.

Open original source Links to the regulator's original publication or another source.