Data processor

In addition to corrective powers, the EDPB suggests that Data Protection Authorities (DPAs) follow a five-step approach when deciding fines.

The Lithuanian DPA’s new breach statistics for H1 2026 showcase human error as an important challenge in GDPR compliance.

Ineffective response to security alerts, inadequate access controls, lack of active directory tiering, and penetration testing shortcomings all cited as factors.

Failure to adequately monitor the work of third-party agencies and security deficiencies of online portal lead to a €45m ($51m) fine.