1. ETF INVESTIGATION PRIVATE HEALTH INSURANCE 2006 XIV Case Handling Workshop Athens, 13-14 November 2006

2. 2 Content sample of insurance companies the powers of the State Data Protection Inspectorate (hereinafter - SDPI) approaching the insurance companies analysis of the answers conclusions

3. 3 Insurance companies Carrying out this investigation SDPI chose 9 private insurance companies working in Lithuania these insurance companies provide private health insurance and are registered in the State Register of Personal Data Controllers

4. 4 The powers of SDPI We indicated in the letters adressed to companies that according to the Article 31 (3) of Law on Legal Protection of Personal Data the SDPI shall power to perform this investigation and according to the Article 32 (1) of Law to obtain free of charge necessary information, copies and trancripts of documents, get access to all data and documents necessary for performing this investigation

5. 5 Approach Questionnaire was translated into Lithuanian language and was sent to all private insurance companies Explanatory letter was attached to Questionnaire in order to make easy to understand certain questions and to give answers

6. 6 Cooperation Cooperation from the insurance companies: no problems of cooperation all companies responded answers in time, respecting given period to answer to SDPI some companies called to SDPI for better understanding the questions

7. 7 Analysis of answers Only several companies gave the comprehensive answers to the questions Other companies answered very short, without explanations Some questions were not understood by companies (certain questions or remaining parts of the questions were left unanswered)

8. 8 Analysis of answers (cont.) Clear answers to the sections of Description of data, Security measures Medium answers to the sections of Information given to the data subject, Legal grounds, Disclosure of information No answers to the section of Information sharing for risk assessment

9. 9 Conclusions These companies which answered comprehensively it can be said that the compliance with Directive seemed to be rather good. It was needed more detailed investigation (to perform investigation on the spot)

10. 10 Proposals for futher work at EU level Depending on results of the national reports it would be very useful to prepare the guidelance concerning the issues where are the lack of compliance with the Directive Performing other wide investigations we propose to prepare the questions and also perform inspection on the spot in order to see the real situation

11. Thank you for your attention Neringa Kaktaviciute n.kaktaviciute@ada.lt