The audits were called after initial investigations by the Data Protection Authority on the processing of personal data of children in five software solutions.

The purpose of the audits was to examine whether information security in Vala and Karellen was ensured in accordance with the data protection legislation, with regard to access to personal data in the systems by unauthorised parties.

The investigation by the Data Protection Authority revealed that Advania and InfoMentor had implemented appropriate technical and organisational security measures in accordance with the provisions of the Data Protection Act, in view of the security risks that were examined. However, the Data Protection Authority considered it warranted to highlight and guide the companies on certain issues in order to ensure, in the opinion of the Authority, even better information security in the systems.