Privacy Law at Latvia
Latvia's data protection framework is primarily governed by the General Data Protection Regulation (GDPR) of the European Union, supplemented by national legislation and enforced by the Data State Inspectorate (DSI).
Legal Framework
Personal Data Processing Law Enacted on July 5, 2018, this law supplements the GDPR by establishing specific national requirements and enforcement mechanisms. It defines the roles of data controllers and processors, outlines the rights of data subjects, and sets forth the responsibilities of the DSI
🛡️ Supervisory Authorit
The Data State Inspectorate (DSI) is the national supervisory authority responsible for ensuring compliance with data protection laws in Latva, The DSI has the authority to conduct inspections, issue fines, and provide guidance on data protection matters
⚖️ Enforcement and Sanction
The DSI can impose administrative fines for violations of data protection las Fines can be up to €20 million or 4% of global annual turnover, whichever is higher, for severe violations, and up to €10 million or 2% of global annual turnover for less severe violations
📌 Key Principles
*Lawfulness, Fairness, and Transparency: Personal data must be processed lawfully, fairly, and transparenly.
*Purpose Limitation: Data should be collected for specified, legitimate purposes and not further processed in a manner incompatible with those purpoes.
*Data Minimization: Only data necessary for the intended purpose should be colleced.
*Accuracy: Personal data must be accurate and kept up to date.
*Storage Limitation: Data should be kept in a form which permits identification of data subjects for no longer than necessary.
*Integrity and Confidentiality: Data must be processed in a manner that ensures its 🧭 Recent Developments
Guidelines and Recommendation: The DSI has issued guidelines on various topics, including data subject rights, data protection impact assessments, and sector-specific issues such as electronic communications and COVID-19 data processing
0 comments