The State Data Protection Inspectorate – personal data protection supervisory authority of the Republic of Lithuania has punished Vilnius City Municipality Administration for infringements of the General Data Protection Regulation. A fine in the amount of EUR 15,000 has been imposed for improperly processed personal data of the parents of an adopted child.
The State Data Protection Inspectorate (hereinafter referred to as the “SDPI”) imposed an administrative fine in the amount of EUR 15,000 on Vilnius City Municipality Administration (hereinafter referred to as the “Municipality Administration”) for infringements of the General Data Protection Regulation (hereinafter referred to as the “GDPR”). The fine was imposed for infringements of Articles 5(1)(d) and 5(1)(f) of the GDPR, i.e. a failure to implement appropriate technical and organisational measures, thus, failing to ensure the accuracy of processed personal data when processing personal data of the parents of the adopted child.

Having carried out an investigation,



the SDPI has determined that when filling in an application for education of the adopted child in the Centralised Application Submission and Population Information System (hereinafter referred to as the “IS”) of the Municipality Administration, the applicant indicated his data; nevertheless, according to the agreement between the Municipality Administration and the State Enterprise Centre of Registers providing for that the data in the IS shall be automatically updated on a monthly basis, when the data in the IS was automatically updated, the contact personal data of the applicant was updated and replaced with the contact data (e-mail address) of one of the biological parents of the child available in the Population Register of the Republic of Lithuania (hereinafter referred to as the “Population Register”).

When processing personal data, the Municipality Administration must follow the principle of accuracy which provides for that the data must be

📌 Lithuanian DPA imposes fine for improperly processed personal data of the parents of an adopted child (Chihuahua)
🏢 EFDPO European Federation of Data Protection Officers
📍 Chihuahua