DVI (Latvia)

From GDPRhub
Datu valsts inspekcija
LogoLV.png
Name: Datu valsts inspekcija
Abbreviation : DVI
Jurisdiction: Latvia
Head: Jekaterina Macuka
Deputy: Lāsma Dilba
Adress: Elijas iela 17

LV-1050

Riga

LATVIA

Webpage: dvi.gov.lv
Email: [1][[2]]
Phone: +371 6722 3131
Twitter: Datu valsts inspekcija (Twitter account)
Procedural Law: n/a
Decision Database: https://www.dvi.gov.lv/lv/lemumi
Translated Decisions: n/a
Head Count: n/a
Budget: https://www.dvi.gov.lv/lv/budzets

The Data State Inspectorate (Datu valsts inspekcija, "DVI") is the national Data Protection Authority for Latvia and was established in 2001. It resides in Riga and is in charge of enforcing GDPR in Latvia.  The DVI is functionally independent institution. Besides GDPR, the regulation of the operation of The DVI is determined in a national law, i.e., Personal Data Processing Law. The Personal Data Processing Law is divided into nine chapters with 39 sections.

Structure

The DVI is financed over the Latvian government budget and organized in 5 departments: prevention, supervision, administrative and legal.

Procedural Information

Applicable Procedural Law

The DVI is bound by the Latvian Law on Administrative Liability and the Administrative Procedure Law.

Complaints Procedure under Art 77 GDPR

There are no formal requirements by law.

The DVI informs the data subjects on its website that before submitting a complaint to the DVI it is recommended to initially contact the person who processed data subjects’ personal data.

As well as when submitting a complaint, the data subject must attach information and documents which prove that they have exercised his/her right of access, i.e., contacted the person who has processed the personal data and, whether or not they have received a response. Attached documents can be the request for access and a document confirming its delivery/sending/submission to the controller) and the controller's response (if any).

There is a special electronic form for submitting a complaint, that is published on website of the DVI. The electronic form contains various information for the DVI to evaluate potential unlawful data processing operations.

Ex Officio Procedures under Art 57 GDPR

You can help us by filling in this section!

Appeals

Administrative offence proceedings

The issued decision of the DVI may be appealed in accordance with the Law on Administrative Liability by submitting a respective submission to the Director of the DVI. Furthermore, the decision issued by Director may be appealed to a court in accordance with the Law on Administrative Liability.

Administrative proceedings

According to Section 24 of the Personal Data Processing Law, an administrative act issued by or actual action of an official of the DVI, may be contested in accordance with the procedures laid down in the Administrative Procedure Law by submitting a respective submission to the Director of the DVI. However, an administrative act issued by or actual action of the Director may be appealed to court in accordance with the procedures laid down in the Administrative Procedure Law.

Practical Information

Filing with the DPA

See above.

Known Problems

You can help us by filling in this section!

Filing an Appeal

See above.

Decision Database

A database of DVI decisions since 2020 can be found on this page (unfortunately only in Latvian).

Statistics

Funding

The DVI is financed by the Latvian government. The funding for 2022 is €1,486,803.

Historical numbers:

  • 2021: €1,226,404
  • 2020: €1,053,392

Personal

The DVI has 33 employees as per 1st October 2022 out of totally approved 34 positions. About 76 % are women, 24% are men.  

Historical numbers:

  • 2021: 33 positions totally approved, on average 28 employees were employed
  • 2020: 31 position totally approved, on average 23 employees were employed

Caseload

2018 2019 2020 2021
Caseload 1206 1236 941 973
Reported data breaches 46 107 113 88
Conducted inspections of data processing 306 246 969 1286
Decisions issued in administrative offence cases 97 45 25 8
Decisions issued in administrative cases - 6 21 25
Fines 12 9 11 6
Decisions contested to the director 20 14 11 14
Decisions appealed to the court 12 9 4 6

Fines

Fines issued:

  • 6 fines in 2021, the lowest being €200 and highest €5,369
  • 11 fines in 2020, the lowest being €200 and highest €65,000
  • 9 fines in 2019, the lowest being €200 and highest €150,000
  • 12 fines in 2018, the lowest being €70 and highest €2,000

Annual Reports

Annual reports are available on this page.

EU/EEA/UK Data Protection Authorities
Austria · Belgium · Bulgaria · Croatia · Cyprus · Czech Republic · Denmark · Estonia · Finland (Åland) · France · Germany (Baden-Württemberg · Bavaria, private sector · Bavaria, public sector · Berlin · Brandenburg · Bremen · Hamburg · Hesse · Lower Saxony · Mecklenburg-Vorpommern · North Rhine-Westphalia · Rhineland-Palatinate · Saarland · Saxony · Saxony-Anhalt · Schleswig-Holstein · Thuringia ) · Greece · Hungary · Ireland · Italy · Latvia · Lithuania · Luxembourg · Malta · Netherlands · Poland · Portugal · Romania · Slovakia · Slovenia · Spain (Basque Country · Catalonia · AndalusiaSweden
Iceland · Liechtenstein · Norway · United Kingdom EDPS · EDPB