Utilizziamo cookie tecnici per personalizzare il sito web e offrire all’utente un servizio di maggior valore. Chiudendo il banner e continuando con la navigazione verranno installati nel Suo dispositivo i cookie tecnici necessari ai fini della navigazione nel Sito. L’installazione dei cookie tecnici non richiede alcun consenso da parte Sua. Ulteriori informazioni sono contenute nella nostra Cookie Policy.



Imposing the biggest fine yet for illegal processing of personal data

PrintMailRate-it

Recently – at the end of last year, the Latvian data protection supervisory authority – Data State Inspectorate (DSI) issued the biggest fine yet for illegal processing of personal data - 150’000,00 EUR. 

According to the director of the DSI, a complaint was received from a Spanish citizen about processing of his data in Latvia, which was not compliant with the GDPR. The director also mentioned that the illegal activities are being investigated internationally, therefore the name of the recipient of the fine may not be made public and no further information may be revealed. Nonetheless, the director did mention, that the case is related to fraud and that it would be handed over to other law enforcement agencies as well. This fine can still be challenged, however there is no further information on this case at this moment. An official statement of the DSI is expected before long. 


In the meantime the conclusion that can be drawn from this case is that the DSI will not hesitate to severely punish non-compliance with the GDPR by imposing impressive monetary fines. Of course, the DSI still exercises the policy to first consult on GDPR compliance and impose fines if the discrepancies are not taken care of, but since the GDPR has been in force for more than one and a half years now, this policy could be running it’s course and the DSI could begin to become less tolerant and patient and begin to impose tougher fines for non-compliance with the provisions of the GDPR. 
Thus we would like to emphasise the importance of ensuring compliance with the GDPR by conducting privacy assessments and data protection impact assessments and, if necessary, creating a data protection policies, records of data processing activities, that would serve as insurance against possible fines from the DSI and other related consequences.

As always, our team at Rödl & Partner Latvia is ready to assist entrepreneurs in ensuring transparent and compliant data processing.

CONTACT

Contact Person Picture

Staņislavs Sviderskis

Assistant Attorney at law, Cyber & Information Security Expert

Senior Associate

+371 6733 8125

Invia richiesta

Skip Ribbon Commands
Skip to main content
Deutschland Weltweit Search Menu