The violation of BDAR in the quarantine application is a fine for NVSC and its developers



[ad_1]

According to the State Data Protection Inspectorate (SDPI), 12,000 LTL were assigned to the NVSC. a fine of 3,000 euros, and for the company IT Solutions for Success – 3,000 euros. bauda.

In spring 2020, the Inspection started monitoring activities in response to information in the media about the possible improper processing of personal data by the Quarantine program. After evaluating the initial information, it was decided to open an investigation and suspend the processing of personal data by the application.

The study found that data had been collected from 677 people since the application was launched in April 2020. Not all personal data was collected to the same extent, but the application provides processing of personal data such as identification number, latitude coordinates and length, country, city, municipality, postal code, street name, house number, first name, last name, personal code. , phone number, address, second address, if the place of residence is declared in Lithuania and other information.

Based on the presented data, it was established that the application data processing was carried out not only on the territory of Lithuania, but also in Europe (Estonia, Switzerland, etc.) and abroad (India, USA, Etc.).

The SDPI found in the investigation that NVSC and application developers are joint data controllers, although both organizations have denied this status.

When deciding on the imposition and amount of the administrative fine, VDAI took into account that NVSC and the company intentionally, largely, illegally, systematically processed personal data, without providing the technical and organizational means to demonstrate compliance with the requirements. of the BDAR. , special categories of personal data were processed.

In addition, the company did not comply with the instruction given by VDAI to stop the processing of personal data collected with the help of the application and deleted some personal data.

The SDPI’s decision may be appealed to the courts within one month from the date of service in accordance with the procedure established by legal acts.

It is not allowed to publish, quote or reproduce the information of the BNS news agency in the media and on websites without the written consent of the UAB “BNS”.



[ad_2]