Content type ยท 10 documents

Enforcement

Regulatory actions, fines, warnings, and enforcement decisions

๐Ÿ‡ช๐Ÿ‡บ EU ๐Ÿ‡ณ๐Ÿ‡ฑ NL
Enforcement dashboard โ€” fines by country, authority and article โ†’
Country: Latvia (10) Clear filter
Filter by Topic Supervisory Authorities3518 Processing Agreement2798 Processing2594 Personal Data2548 Controllers2165 Data Controller1854 Law Enforcement1541 IP Address1278 Security1007 Supervision854 Monitoring523 Consent498
DSI ยท โ‚ฌ300,000 SIA 'ZZ Dats': Onvoldoende technische en organisatorische maatregelen om de informatiebeveiliging te waarborgen. Een boete van 300.000 euro - Inspectie gegevensbescherming (DSI). Security Data Processor Processors NL Oct 28, 2025
DSI ยท โ‚ฌ300,000 SIA 'ZZ Dats': Insufficient technical and organisational measures to ensure information security The Latvian DPA has imposed a fine of EUR 300,000 on SIA 'ZZ Dats'. The entity that was fined was the data processor for almost all local governments in Latvia. It failed toโ€ฆ Data Breaches Security Processors Oct 28, 2025
DSI Company: Insufficient legal basis for data processing The Latvian DPA has fined a company for issuing loyalty cards to customers without a valid legal basis. Processing Agreement Processing Supervisory Authorities Jan 1, 2022
DSI LATVIA DPA: Insufficient cooperation with supervisory authority Six fines for failing to provide information requested by the DPA during an investigation. Supervisory Authorities Fines Supervision Jan 1, 2022
DSI LATVIA DPA: Insufficient cooperation with supervisory authority Five fines for failing to comply with orders issued by the DPA. Fines Supervisory Authorities Supervision Jan 1, 2022
DSI ยท โ‚ฌ65,000 Lursoft IT SIA: Insufficient legal basis for data processing The Latvian DPA (DSI) fined Lursoft IT SIA EUR 65,000 for the illegal processing of personal data by publishing documents containing personal data on its website 'www.lursoft.lv'.โ€ฆ Personal Data Controllers Processing Feb 9, 2021
DSI ยท โ‚ฌ6,250 LATVIA DPA: Insufficient legal basis for data processing The Latvian DPA (DSI) fined an employer EUR 6,250 for sending personal data of an employee, including health data, to fellow employees by email. The DSI found that the dataโ€ฆ Personal Data Health Data Employees Dec 15, 2020
DSI ยท โ‚ฌ15,000 HH Invest SIA: Insufficient fulfilment of information obligations The Latvian DPA (DSI) fined the online store HH Invest SIA EUR 15,000. The information provided on the company's website regarding the privacy policy was found not to be easilyโ€ฆ Corrective Actions and Duty of Information Framework Processing Agreement Supervisory Authorities Dec 15, 2020
DSI ยท โ‚ฌ150,000 LATVIA DPA: Insufficient legal basis for data processing Unlawful data processing. No further information available yet. Processing Processing Agreement Supervisory Authorities Nov 1, 2019
DSI ยท โ‚ฌ7,000 Online Services: Insufficient fulfilment of data subjects rights A merchant who provides services in an online store has infringed the 'right to be forgotten' pursuant to Art. 17 GDPR when he was repeatedly requested by a data subject to deleteโ€ฆ Right to be Forgotten Personal Data Direct Marketing Aug 26, 2019