VDAI (Lithuania) - 3R-661
| VDAI - 3R-661 | |
|---|---|
| [[File:|center|250px]] | |
| Authority: | VDAI (Lithuania) |
| Jurisdiction: | Lithuania |
| Relevant Law: | Article 12(3) GDPR Article 15(1) GDPR Article 15(3) GDPR |
| Type: | Complaint |
| Outcome: | Upheld |
| Started: | |
| Decided: | 03.06.2025 |
| Published: | |
| Fine: | n/a |
| Parties: | UAB Medical Score |
| National Case Number/Name: | 3R-661 |
| European Case Law Identifier: | n/a |
| Appeal: | Unknown |
| Original Language(s): | Lithuanian |
| Original Source: | VDAI (in LT) |
| Initial Contributor: | cci |
The DPA reprimanded a company for failing to respond to an access request. Specifically, the controller did not confirm that it did not process personal data referring to the data subject.
English Summary
Facts
An unnamed data subject requested a copy of their data from the company UAB Medical Score (the controller). The controller did not reply. The data subject later filed a complaint.
During the investigation, the controller clarified that the data subject did not purchase its products and that it did not respond to the request because it controlled did not process any personal data referring to the data subject.
Holding
The DPA held that Article 15 GDPR required the controller to inform the data subjects that it did not process their personal data. For this reason, the DPA held that the controller violated Articles 12(3) and 15(1)(3) GDPR.
The DPA issued a reprimand and ordered the controller to respond to similar requests in the future.
Comment
Share your comments here!
Further Resources
Share blogs or news articles here!
English Machine Translation of the Decision
The decision below is a machine translation of the Lithuanian original. Please refer to the Lithuanian original for more details.
