Content type · 10 documents in this view · 3,811 in total

Enforcement

Regulatory actions, fines, warnings, and enforcement decisions

🇪🇺 EU 🇳🇱 NL
Enforcement dashboard — fines by country, authority and article →
Country: Latvia (10) Clear filter
Filter by Topic Supervisory Authorities 3587 Processing 2635 Personal Data 2394 Controllers 2017 Processing Agreement 1114 Security 1013 Supervision 847 Healthcare 621 Law Enforcement 568 Monitoring 547 Public Authority 539 Consent 508
1–10 of 10 sort newestlargest fineoldest
€300,000 SIA 'ZZ Dats': Insufficient technical and organisational measures to ensure information security The Latvian DPA has imposed a fine of EUR 300,000 on SIA 'ZZ Dats'. The entity that was fined was the data processor for almost all local governments in Latvia. It failed to… LATVIA ·Art. 32 Processors Security Controllers Oct 28, 2025
€300,000 SIA 'ZZ Dats': Onvoldoende technische en organisatorische maatregelen om de informatiebeveiliging te waarborgen. Een boete van 300.000 euro - Inspectie gegevensbescherming (DSI). LATVIA ·Art. 32 Security Controllers Processors Oct 28, 2025
LATVIA DPA: Insufficient cooperation with supervisory authority Six fines for failing to provide information requested by the DPA during an investigation. Art. 58 ·Insufficient cooperation with supervisory authority Supervisory Authorities Supervision Fines Jan 1, 2022
LATVIA DPA: Insufficient cooperation with supervisory authority Five fines for failing to comply with orders issued by the DPA. Art. 58 ·Insufficient cooperation with supervisory authority Supervisory Authorities Supervision Processing Agreement Jan 1, 2022
Company: Insufficient legal basis for data processing The Latvian DPA has fined a company for issuing loyalty cards to customers without a valid legal basis. LATVIA ·Art. 5, 6 Processing Supervisory Authorities Jan 1, 2022
€65,000 Lursoft IT SIA: Insufficient legal basis for data processing The Latvian DPA (DSI) fined Lursoft IT SIA EUR 65,000 for the illegal processing of personal data by publishing documents containing personal data on its website 'www.lursoft.lv'.… LATVIA ·Art. 6 Personal Data Controllers Processing Feb 9, 2021
€15,000 HH Invest SIA: Insufficient fulfilment of information obligations The Latvian DPA (DSI) fined the online store HH Invest SIA EUR 15,000. The information provided on the company's website regarding the privacy policy was found not to be easily… LATVIA ·Art. 13 Supervisory Authorities Dec 15, 2020
€6,250 LATVIA DPA: Insufficient legal basis for data processing The Latvian DPA (DSI) fined an employer EUR 6,250 for sending personal data of an employee, including health data, to fellow employees by email. The DSI found that the data… Art. 5, 6 ·Insufficient legal basis for data processing Personal Data Types of Special Categories of Personal Data Processing Dec 15, 2020
€150,000 LATVIA DPA: Insufficient legal basis for data processing Unlawful data processing. No further information available yet. Art. 6 ·Insufficient legal basis for data processing Supervisory Authorities Processing Processing Agreement Nov 1, 2019
€7,000 Online Services: Insufficient fulfilment of data subjects rights A merchant who provides services in an online store has infringed the 'right to be forgotten' pursuant to Art. 17 GDPR when he was repeatedly requested by a data subject to delete… LATVIA ·Art. 17 Right to be Forgotten Personal Data Direct Marketing Aug 26, 2019