Regulatory actions, fines, warnings, and enforcement decisions
โฌ300,000 fine - Data State Inspectorate (DSI)
The Latvian DPA has imposed a fine of EUR 300,000 on SIA 'ZZ Dats'. The entity that was fined was the data processor for almost all local governments in Latvia. It failed to implement adequate technical and organisational measures to ensure data security, resulting in a data breach. The entity appealed the decision to the Riga City Court.
Een boete van 300.000 euro - Inspectie gegevensbescherming (DSI).
De Letse Autoriteit Persoonsgegevens heeft een boete van 300.000 euro opgelegd aan het bedrijf SIA 'ZZ Dats'. Dit bedrijf was de verwerker van persoonsgegevens voor bijna alle lokale overheden in Letland. Het heeft nagelaten om voldoende technische en organisatorische maatregelen te implementeren om de gegevensbeveiliging te waarborgen, wat heeft geleid tot een datalek. Het bedrijf heeft tegen deze beslissing beroep aangetekend bij het stadsbestuur van Riga.
Data State Inspectorate (DSI)
Six fines for failing to provide information requested by the DPA during an investigation.
Data State Inspectorate (DSI)
Five fines for failing to comply with orders issued by the DPA.
Data State Inspectorate (DSI)
The Latvian DPA has fined a company for issuing loyalty cards to customers without a valid legal basis.
โฌ65,000 fine - Data State Inspectorate (DSI)
The Latvian DPA (DSI) fined Lursoft IT SIA EUR 65,000 for the illegal processing of personal data by publishing documents containing personal data on its website 'www.lursoft.lv'. The DPA found that the controller made parts of the non-public company register, which contained, among other things personal data, publicly available.
โฌ6,250 fine - Data State Inspectorate (DSI)
The Latvian DPA (DSI) fined an employer EUR 6,250 for sending personal data of an employee, including health data, to fellow employees by email. The DSI found that the data subject's personal data had been processed without a proper legal basis and thus this processing was unlawful.
โฌ15,000 fine - Data State Inspectorate (DSI)
The Latvian DPA (DSI) fined the online store HH Invest SIA EUR 15,000. The information provided on the company's website regarding the privacy policy was found not to be easily understandable. This constitutes a violation of Art. 13 GDPR.
โฌ150,000 fine - Data State Inspectorate (DSI)
Unlawful data processing. No further information available yet.
โฌ7,000 fine - Data State Inspectorate (DSI)
A merchant who provides services in an online store has infringed the 'right to be forgotten' pursuant to Art. 17 GDPR when he was repeatedly requested by a data subject to delete all his personal data, in particular his/her mobile phone number, which the merchant had received as part of an order. Nevertheless, the merchant repeatedly sent advertising messages by SMS to the data subjects mobile phone number.