Lithuania: Vinted fined EUR 2.4mn for consumer data breaches

Lithuania’s State Data Protection Inspectorate (VDAI) has imposed a fine of EUR 2.39mn on the local online marketplace for second-hand goods, Vinted, for violating consumer data protection laws, BNS reports. The fine follows complaints from French and Polish supervisory authorities and pertains to breaches of the EU’s General Data Protection Regulation (GDPR). Vinted was found to have inadequately addressed customer requests to erase or access their data and unlawfully practiced “shadow banning” to force users off the platform. The company can appeal the decision within a month. Vinted has faced multiple legal challenges, including fines in Poland and Italy and a class action lawsuit in France for misleading users and improper advertising.