Latvian Data Protection Supervisory Authority

​Data State Inspectorate (DSI) has released an overview regarding current situation with GDPR awareness among the entrepreneurs in the Republic of Latvia.

Pursuant to DSI findings and results of surveys, DSI claims that approximately 25% of all local companies are not concerned about their compliance with the provisions of GDPR, as in their view data protection regulation is not applicable to them. It shows a lack of understanding and necessity to assess the compliance of business with privacy regulation in order to maintain personal data protected and compliant commercial activities.

Since GDPR became binding for everyone involved in personal data processing, by the end of year 2018 DSI has received 1204 claims and, based on them, has initiated 306 inspections for possible infringements. In 97 cases, there were detected violations of GDPR provisions, where (at least for now) DSI imposed softening sanctions against data controllers, namely, by issuing warnings in 85 cases and imposing monetary fines in 12 cases.

DSI believes that entrepreneurs will be aware and ensure their compliance with data protection regulation in the next three years. Considering that in the nearest future DSI, most likely, will start imposing more severe sanctions against the data controllers for violations of GDPR, as a tolerance and consultation period is going to end, in order to avoid possible sanctions and ensure transparent and compliant data processing, we encourage entrepreneurs to review their internal processes, as well as cooperation modalities with partners, where personal data is involved.