# Reda Naujokaitienė: Insufficient legal basis for data processing

- Type: Enforcement
- Source: Lithuanian Data Protection Authority (VDAI)
- Date: 2026-06-05
- Original: https://www.enforcementtracker.com/ETid-3199
- Canonical: https://overview.legal/posts/83464
- Topics: Personal Data, Special Categories of Data, Supervisory Authorities

## Summary

The Lithuanian Data Protection Authority (VDAI) fined Reda Naujokaitienė €1,153 on June 5, 2026, for insufficient legal basis for personal data processing in the health care sector. The decision found violations of GDPR Articles 5(1)(a), 6(1), and 9(2), concerning the failure to establish a valid legal basis for processing, including special categories of personal data. The fine reflects the authority's assessment of the infringement's nature and circumstances.

## Full text

Lithuanian Data Protection Authority (VDAI) fined Reda Naujokaitienė €1,153 on 2026-06-05 for: Insufficient legal basis for data processing.
GDPR Articles: Art. 5 (1) a) GDPR, Art. 6 (1) GDPR, Art. 9 (2) GDPR
Sector: Health Care
Country: Lithuania
Source: https://vdai.lrv.lt/public/canonical/1780997432/1430/2026-06-05%20sprendimas%20Nr.%203R-1040%20(2.13-1.E).pdf?__cf_chl_f_tk=UYzCbJ9T.Gvh9Wo6pmgU.w4.p3216UwMgjNK3pd7Qdk-1783522671-1.0.1.1-CRZCkdEg393Y1pnBjp_PziPIvne2idWgFivBjYCPxjU

---
Generated by overview.legal · https://overview.legal/posts/83464 · 2026-08-23