- Enforcing jurisdiction
- Lithuania · Geography does not establish applicable law.
- Confirmed applicable legislation
- Privacy topics
UAB Medical Score – Complaint Upheld (Lithuania, 2025)
Privacy enforcement record
This record is classified outside cookie consent. Subject classification does not confirm an applicable law. It is not included in cookie statistics or the Risk Calculator.
The Lithuanian data protection authority upheld a complaint against UAB Medical Score for not responding to a user's request for their data. The authority emphasized that companies must inform users if they do not process their data. This case stresses the importance of communication in data protection.
What happened
UAB Medical Score did not respond to a user's request for a copy of their personal data.
Who was affected
A user who requested their personal data from UAB Medical Score.
What the authority found
The authority found that UAB Medical Score violated GDPR by failing to inform the user that it did not process their personal data.
Why this matters
This case serves as a reminder for companies to communicate clearly with users about their data requests. Transparency is essential in maintaining trust and compliance with data protection laws.
View original scraped data
Original imported citations before automated processing; the processing history does not establish independent verification.
Source checks
Secondary-source text retrieved.
Automated check recorded — 19 March 2026.
Processing notes: articles corrected.
Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources
An unnamed data subject requested a copy of their data from the company UAB Medical Score (the controller). The controller did not reply. The data subject later filed a complaint. During the investigation, the controller clarified that the data subject did not purchase its products and that it did not respond to the request because it controlled did not process any personal data referring to the data subject. The DPA held that Article 15 GDPR required the controller to inform the data subjects that it did not process their personal data. For this reason, the DPA held that the controller violated Articles 12(3) and 15(1)(3) GDPR. The DPA issued a reprimand and ordered the controller to respond to similar requests in the future.
Outcome
Complaint Upheld
A data subject complaint that was upheld by the DPA.
Related Enforcement Actions (0)
No other enforcement actions found for UAB Medical Score in LT
This is the only recorded action for this entity in this jurisdiction.
Details
About this data
Cite as: Cookie Fines. UAB Medical Score - Lithuania (2025). Retrieved from cookiefines.eu
Last updated: