Decisions of the Inspectorate (fines, orders, etc.)

In this section of the website the State Data Protection Inspectorate publishes more significant decisions regarding violations of personal data processing by data controllers and data processors after the Inspectorate has examined complaints of the data subjects, personal data breaches or other issues.

2022

Decisions:

Decision on the right to access data exercised by the financial institution (19 May 2022)

Decision on the processing of personal data for the purpose of direct marketing (15 July 2022)

Decision on the processing of employees’ personal data (processing of employee’s personal correspondence) (7 October 2022)

Decision on the actions of the organisation on the processing of children’s image data (30 September 2022)

2021
Total number of fines in 2021 – 26

Fine Imposed on a Sports Club for Infringements of the GDPR in Processing of Fingerprints of the Customers and Employees (private sector, 20 thous. Eur)

The Fine for the Centre of Registers Was Issued Regarding the Infringements of the GDPR (public sector, 15 thous. Eur) 02-03-2021

The Fine Issued for Infringements of the GDPR in Mobile Application “Karantinas” (public sector, 12 thous. Eur; private sector, 3 thous. Eur) 26-02-2021

2020
Total number of fines in 2020 – 25

The Fine for the Breaches of the GDPR Was Imposed for Municipality Regarding Improperly Processed Personal Data of the Parents of an Adopted Child (public sector, 15 thous. Eur) 28-09-2020

The Inspectorate carried out an investigation into sound recording in public transport buses. The private company UAB “Vilniaus viešasis transportas” was fined Eur 8,000 for violating Arts. 5, 13, 24 and 35 of the GDPR. 30-04-2020

2019
Total number of fines in 2019 – 6

The Fine for the Breaches of the GDPR Was Imposed on the Company Providing the Payment Initiation Services (private sector, 61.5 thous. Eur) 17-05-2019