Vilnius City Municipality Administration: Non-compliance with general data processing principles

During the data synchronization of the Population Information System of the Municipal Administration with the databases of the State Centre for Business Registers, the personal data of an applicant for the fostering of an adopted child was replaced, due to an error, with the personal data of the biological parents, which were subsequently accessible in the Population Register of the Republic of Lithuania. This constituted a violation of the principles of integrity and confidentiality of personal data processing (Art. 5 (1) f) GDPR) and a violation of the principle of accuracy.

GDPR Articles: Art. 5 (1) d) GDPR, Art. 5 (1) f) GDPR
Industry: Public Sector and Education