# Private individual: Insufficient legal basis for data processing

- Type: Enforcement
- Source: Data State Inspectorate (DSI)
- Date: 2026-09-03
- Original: https://www.enforcementtracker.com/ETid-3413
- Canonical: https://overview.legal/posts/607772
- Topics: Personal Data, Processing

## Summary

The Latvian Data State Inspectorate (DSI) fined a private individual €300 on September 3, 2026, for processing personal data without a sufficient legal basis. The case involved violations of GDPR Articles 5(1)(a) and (b), Article 6(1), and Article 9(2), concerning the principles of lawfulness and purpose limitation as well as the processing of special categories of data. The DSI imposed the monetary penalty to address the individual's failure to establish a valid legal basis for the data processing activities.

## Full text

Data State Inspectorate (DSI) fined Private individual €300 on 2026-09-03 for: Insufficient legal basis for data processing.
GDPR Articles: Art. 5 (1) a), b) GDPR, Art. 6 (1) GDPR, Art. 9 (2) GDPR
Sector: Individuals and Private Associations
Country: Latvia
Source: https://www.dvi.gov.lv/lv/media/5188/download

---
Generated by overview.legal · https://overview.legal/posts/607772 · 2026-11-14