The State Data Protection Inspectorate ('VDAI') announced, on 7 April 2022, its 2022 plan for scheduled inspections and monitoring. In particular, the VDAI highlighted that it had planned to carry out inspections of 30 public and private sector organisations on the implementation of the requirements relating to the activities of the data protection officer ('DPO') under the General Data Protection Regulation (Regulation (EU) 2016/679) ('GDPR'). In this regard, the VDAI recalled that under the GDPR there is a requirement to appoint a DPO for public authorities and bodies, as well as those private sector organisations whose main activity is the large-scale systematic monitoring of individuals or the large-scale processing of specific categories of personal data. Furthermore, the VDAI outlined that inspections of the DPO will be carried out on the basis of a pre-prepared and publicly available control questionnaire, and on-the-spot inspections will be carried out if the information provided in the questionnaire needs to be clarified and verified.

In addition, the VDAI announced that it will be inspecting 20 public and private sector organisations on the implementation of requirements for the processing of personal data collected through the use of cookies, outlining that monitoring will be carried out by means of a written survey and, if necessary, a checklist. Moreover, the VDAI indicated that several organisations will be re-inspected this year for irregularities detected in previous years.

You can read the press release, only available in Lithuanian, here.