Vilnius City Municipality Administration
Non-compliance with general data processing principles
Decision Date
October 21, 2020
Authority
Lithuanian Data Protection Authority (VDAI)
LT
Sector
Public Sector and Education
Country
LT
Law
GDPRStatus
FINALDescription
During the data synchronization of the Population Information System of the Municipal Administration with the databases of the State Centre for Business Registers, the personal data of an applicant for the fostering of an adopted child was replaced, due to an error, with the personal data of the biological parents, which were subsequently accessible in the Population Register of the Republic of Lithuania. This constituted a violation of the principles of integrity and confidentiality of personal data processing (Art. 5 (1) f) GDPR) and a violation of the principle of accuracy.