# LATVIA DPA: Insufficient legal basis for data processing

- Type: Enforcement
- Source: Data State Inspectorate (DSI)
- Date: 2020-12-15
- Original: https://www.enforcementtracker.com/ETid-488
- Canonical: https://overview.legal/posts/46603
- Topics: Personal Data, Health Data, Healthcare, Employees, Processing Agreement, Processing, Supervisory Authorities, Special Categories of Data, Types of Special Categories of Personal Data

## Summary

The Latvian DPA (DSI) fined an employer EUR 6,250 for sending personal data of an employee, including health data, to fellow employees by email. The DSI found that the data subject's personal data had been processed without a proper legal basis and thus this processing was unlawful.

## Full text

The Latvian DPA (DSI) fined an employer EUR 6,250 for sending personal data of an employee, including health data, to fellow employees by email. The DSI found that the data subject's personal data had been processed without a proper legal basis and thus this processing was unlawful.

GDPR Articles: Art. 5 GDPR, Art. 6 GDPR
Industry: Employment

---
Generated by overview.legal · https://overview.legal/posts/46603 · 2026-08-22