DVI (Latvia): Difference between revisions
m (Updated information and links in the table about Inspectorate. Used their own webpage as information source.) |
(Updated with info from the Latvian DPA) |
||
| Line 42: | Line 42: | ||
|} | |} | ||
The Data State Inspectorate (''Datu valsts inspekcija'') is the national Data Protection Authority for Latvia. It resides in Riga and is in charge of enforcing GDPR in Latvia. | The Data State Inspectorate (''Datu valsts inspekcija, "DVI"'') is the national Data Protection Authority for Latvia and was established in 2001. It resides in Riga and is in charge of enforcing GDPR in Latvia. The DVI is functionally independent institution. Besides GDPR, the regulation of the operation of The DVI is determined in a national law, i.e., Personal Data Processing Law. The Personal Data Processing Law is divided into nine chapters with 39 sections. | ||
==Structure== | ==Structure== | ||
The DVI is financed over the Latvian government budget and organized in 5 departments: prevention, supervision, administrative and legal. | |||
==Procedural Information== | ==Procedural Information== | ||
===Applicable Procedural Law=== | ===Applicable Procedural Law=== | ||
'' | The DVI is bound by the Latvian ''[https://likumi.lv/ta/en/en/id/303007-law-on-administrative-liability Law on Administrative Liability]'' and the ''[https://likumi.lv/ta/en/en/id/55567-administrative-procedure-law Administrative Procedure Law]''. | ||
===Complaints Procedure under Art 77 GDPR=== | ===Complaints Procedure under Art 77 GDPR=== | ||
There are no formal requirements by law. | |||
The DVI informs the data subjects on its website that before submitting a complaint to the DVI it is recommended to initially contact the person who processed data subjects’ personal data. | |||
As well as when submitting a complaint, the data subject must attach information and documents which prove that they have exercised his/her right of access, i.e., contacted the person who has processed the personal data and, whether or not they have received a response. Attached documents can be the request for access and a document confirming its delivery/sending/submission to the controller) and the controller's response (if any). | |||
There is a special electronic form for submitting a complaint, that is published on website of the DVI. The electronic form contains various information for the DVI to evaluate potential unlawful data processing operations. | |||
===''Ex Officio'' Procedures under Art 57 GDPR=== | ===''Ex Officio'' Procedures under Art 57 GDPR=== | ||
| Line 59: | Line 65: | ||
===Appeals=== | ===Appeals=== | ||
'' | '''''Administrative offence proceedings''''' | ||
The issued decision of the DVI may be appealed in accordance with the ''Law on Administrative Liability'' by submitting a respective submission to the Director of the DVI. Furthermore, the decision issued by Director may be appealed to a court in accordance with the ''Law on Administrative Liability''. | |||
'''''Administrative proceedings''''' | |||
According to Section 24 of the ''Personal Data Processing Law,'' an administrative act issued by or actual action of an official of the DVI, may be contested in accordance with the procedures laid down in the ''Administrative Procedure Law'' by submitting a respective submission to the Director of the DVI. However, an administrative act issued by or actual action of the Director may be appealed to court in accordance with the procedures laid down in the ''Administrative Procedure Law''. | |||
==Practical Information== | ==Practical Information== | ||
=== Filing with the DPA === | === Filing with the DPA === | ||
See above. | |||
=== Known Problems === | === Known Problems === | ||
| Line 70: | Line 82: | ||
=== Filing an Appeal === | === Filing an Appeal === | ||
See above. | |||
==Decision Database== | ==Decision Database== | ||
A database | A database of DVI decisions since 2020 can be found [https://www.dvi.gov.lv/lv/lemumi on this page] (unfortunately only in Latvian). | ||
==Statistics== | ==Statistics== | ||
=== Funding === | === Funding === | ||
The DVI is financed by the Latvian government. The funding for 2022 is €1,486,803. | |||
Historical numbers: | |||
* 2021: €1,226,404 | |||
* 2020: €1,053,392 | |||
=== Personal === | === Personal === | ||
The DVI has 33 employees as per 1st October 2022 out of totally approved 34 positions. About 76 % are women, 24% are men. | |||
Historical numbers: | |||
* 2021: 33 positions totally approved, on average 28 employees were employed | |||
* 2020: 31 position totally approved, on average 23 employees were employed | |||
=== Caseload === | === Caseload === | ||
'' | {| class="wikitable" | ||
| | |||
|'''2018''' | |||
|'''2019''' | |||
|'''2020''' | |||
|'''2021''' | |||
|- | |||
|'''Caseload''' | |||
|1206 | |||
|1236 | |||
|941 | |||
|973 | |||
|- | |||
|'''Reported data breaches''' | |||
|46 | |||
|107 | |||
|113 | |||
|88 | |||
|- | |||
|'''Conducted inspections of data processing''' | |||
|306 | |||
|246 | |||
|969 | |||
|1286 | |||
|- | |||
|'''Decisions issued in administrative offence cases''' | |||
|97 | |||
|45 | |||
|25 | |||
|8 | |||
|- | |||
|'''Decisions issued in administrative cases''' | |||
|<nowiki>-</nowiki> | |||
|6 | |||
|21 | |||
|25 | |||
|- | |||
|'''Fines''' | |||
|12 | |||
|9 | |||
|11 | |||
|6 | |||
|- | |||
|'''Decisions contested to the director''' | |||
|20 | |||
|14 | |||
|11 | |||
|14 | |||
|- | |||
|'''Decisions appealed to the court''' | |||
|12 | |||
|9 | |||
|4 | |||
|6 | |||
|} | |||
=== Fines === | === Fines === | ||
Fines issued: | |||
* 6 fines in 2021, the lowest being €200 and highest €5,369 | |||
* 11 fines in 2020, the lowest being €200 and highest €65,000 | |||
* 9 fines in 2019, the lowest being €200 and highest €150,000 | |||
* 12 fines in 2018, the lowest being €70 and highest €2,000 | |||
=== Annual Reports === | === Annual Reports === | ||
Revision as of 04:33, 11 October 2022
| Datu valsts inspekcija | |
|---|---|
 | |
| Name: | Datu valsts inspekcija |
| Abbreviation : | DVI |
| Jurisdiction: | Latvia |
| Head: | Jekaterina Macuka |
| Deputy: | Lāsma Dilba |
| Adress: | Elijas iela 17
LV-1050 Riga LATVIA |
| Webpage: | dvi.gov.lv |
| Email: | [1][[2]] |
| Phone: | +371 6722 3131 |
| Twitter: | Datu valsts inspekcija (Twitter account) |
| Procedural Law: | n/a |
| Decision Database: | https://www.dvi.gov.lv/lv/lemumi |
| Translated Decisions: | n/a |
| Head Count: | n/a |
| Budget: | https://www.dvi.gov.lv/lv/budzets |
The Data State Inspectorate (Datu valsts inspekcija, "DVI") is the national Data Protection Authority for Latvia and was established in 2001. It resides in Riga and is in charge of enforcing GDPR in Latvia. The DVI is functionally independent institution. Besides GDPR, the regulation of the operation of The DVI is determined in a national law, i.e., Personal Data Processing Law. The Personal Data Processing Law is divided into nine chapters with 39 sections.
Structure
The DVI is financed over the Latvian government budget and organized in 5 departments: prevention, supervision, administrative and legal.
Procedural Information
Applicable Procedural Law
The DVI is bound by the Latvian Law on Administrative Liability and the Administrative Procedure Law.
Complaints Procedure under Art 77 GDPR
There are no formal requirements by law.
The DVI informs the data subjects on its website that before submitting a complaint to the DVI it is recommended to initially contact the person who processed data subjects’ personal data.
As well as when submitting a complaint, the data subject must attach information and documents which prove that they have exercised his/her right of access, i.e., contacted the person who has processed the personal data and, whether or not they have received a response. Attached documents can be the request for access and a document confirming its delivery/sending/submission to the controller) and the controller's response (if any).
There is a special electronic form for submitting a complaint, that is published on website of the DVI. The electronic form contains various information for the DVI to evaluate potential unlawful data processing operations.
Ex Officio Procedures under Art 57 GDPR
You can help us by filling in this section!
Appeals
Administrative offence proceedings
The issued decision of the DVI may be appealed in accordance with the Law on Administrative Liability by submitting a respective submission to the Director of the DVI. Furthermore, the decision issued by Director may be appealed to a court in accordance with the Law on Administrative Liability.
Administrative proceedings
According to Section 24 of the Personal Data Processing Law, an administrative act issued by or actual action of an official of the DVI, may be contested in accordance with the procedures laid down in the Administrative Procedure Law by submitting a respective submission to the Director of the DVI. However, an administrative act issued by or actual action of the Director may be appealed to court in accordance with the procedures laid down in the Administrative Procedure Law.
Practical Information
Filing with the DPA
See above.
Known Problems
You can help us by filling in this section!
Filing an Appeal
See above.
Decision Database
A database of DVI decisions since 2020 can be found on this page (unfortunately only in Latvian).
Statistics
Funding
The DVI is financed by the Latvian government. The funding for 2022 is €1,486,803.
Historical numbers:
- 2021: €1,226,404
- 2020: €1,053,392
Personal
The DVI has 33 employees as per 1st October 2022 out of totally approved 34 positions. About 76 % are women, 24% are men.
Historical numbers:
- 2021: 33 positions totally approved, on average 28 employees were employed
- 2020: 31 position totally approved, on average 23 employees were employed
Caseload
| 2018 | 2019 | 2020 | 2021 | |
| Caseload | 1206 | 1236 | 941 | 973 |
| Reported data breaches | 46 | 107 | 113 | 88 |
| Conducted inspections of data processing | 306 | 246 | 969 | 1286 |
| Decisions issued in administrative offence cases | 97 | 45 | 25 | 8 |
| Decisions issued in administrative cases | - | 6 | 21 | 25 |
| Fines | 12 | 9 | 11 | 6 |
| Decisions contested to the director | 20 | 14 | 11 | 14 |
| Decisions appealed to the court | 12 | 9 | 4 | 6 |
Fines
Fines issued:
- 6 fines in 2021, the lowest being €200 and highest €5,369
- 11 fines in 2020, the lowest being €200 and highest €65,000
- 9 fines in 2019, the lowest being €200 and highest €150,000
- 12 fines in 2018, the lowest being €70 and highest €2,000
Annual Reports
You can help us by filling in this section!
| EU/EEA/UK Data Protection Authorities | |
|---|---|
| Austria · Belgium · Bulgaria · Croatia · Cyprus · Czech Republic · Denmark · Estonia · Finland (Åland) · France · Germany (Baden-Württemberg · Bavaria, private sector · Bavaria, public sector · Berlin · Brandenburg · Bremen · Hamburg · Hesse · Lower Saxony · Mecklenburg-Vorpommern · North Rhine-Westphalia · Rhineland-Palatinate · Saarland · Saxony · Saxony-Anhalt · Schleswig-Holstein · Thuringia ) · Greece · Hungary · Ireland · Italy · Latvia · Lithuania · Luxembourg · Malta · Netherlands · Poland · Portugal · Romania · Slovakia · Slovenia · Spain (Basque Country · Catalonia · Andalusia)· Sweden | |
| Iceland · Liechtenstein · Norway · United Kingdom | EDPS · EDPB |
