Priorities of Latvian Data State Inspectorate

Since video surveillance is recognized as one of the most substantial data processing activities that has a considerable impact on data subjects, data processing by means of video surveillance is subject to several very strict requirements. Such requirements include, but are not limited to:

It should also be noted that, according to the current data protection legal framework, not only the data controller, but also the data processor carrying out the processing of personal data in accordance with the instructions of the data controller, shall be responsible for compliance with the requirements listed above. Therefore, proper attention must be brought to the implementation of all necessary internal procedures and policies in order to ensure compliance with the legal obligations applicable to the processing and protection of personal data protection, as the priorities of the DSI include, inter alia, preventive actions, i.e., issuing warnings and imposing fines for breaches of laws regulating data protection.

Another important aspect that both controllers and processors should take into account is that having proper internal procedures for personal data processing in place not only protects the accountability of a company and its management, but also gives control over data processing and serves as an effective instrument for cooperation with supervisory authorities, as well as ensures being able to immediately respond to incidents, all of which taken together improves the reputation of a company.