View source for DVI (Latvia) - Cēsu novada Pašvaldības policijai

{{DPAdecisionBOX

|Jurisdiction=Latvia
|DPA-BG-Color=
|DPAlogo=LogoLV.png
|DPA_Abbrevation=DVI
|DPA_With_Country=DVI (Latvia)

|Case_Number_Name=Cēsu novada Pašvaldības policijai
|ECLI=

|Original_Source_Name_1=DVI (Latvia)
|Original_Source_Link_1=https://www.dvi.gov.lv/lv/lemumi
|Original_Source_Language_1=Latvian
|Original_Source_Language__Code_1=LV
|Original_Source_Name_2=
|Original_Source_Link_2=
|Original_Source_Language_2=
|Original_Source_Language__Code_2=

|Type=Complaint
|Outcome=Upheld
|Date_Started=
|Date_Decided=18.08.2022
|Date_Published=
|Year=2022
|Fine=
|Currency=

|GDPR_Article_1=Article 5 GDPR
|GDPR_Article_Link_1=Article 5 GDPR
|GDPR_Article_2=Article 6 GDPR
|GDPR_Article_Link_2=Article 6 GDPR
|GDPR_Article_3=Article 24(1) GDPR
|GDPR_Article_Link_3=Article 24 GDPR#1
|GDPR_Article_4=
|GDPR_Article_Link_4=
|GDPR_Article_5=
|GDPR_Article_Link_5=

|EU_Law_Name_1=
|EU_Law_Link_1=
|EU_Law_Name_2=
|EU_Law_Link_2=

|National_Law_Name_1=
|National_Law_Link_1=
|National_Law_Name_2=
|National_Law_Link_2=

|Party_Name_1=
|Party_Link_1=
|Party_Name_2=
|Party_Link_2=

|Appeal_To_Body=
|Appeal_To_Case_Number_Name=
|Appeal_To_Status=Unknown
|Appeal_To_Link=

|Initial_Contributor=mg
|
}}

The Latvian DPA issued a reprimand against a police office for not having established appropriate data processing procedures to deal with a domestic violence case.

== English Summary ==

=== Facts ===
The data subject’s former spouse wished to ask for temporary protection against domestic violence. The spouse informed a police officer that the data subject had been subject to administrative sanctions and restrictive measures imposed by a court. 

The police officer used a police database to confirm these allegations. In addition, the police officer used the data subject´s identification number to check their criminal record. Finally, the police officer submitted to a court an application for temporary protection against domestic violence on behalf of the data subject´s spouse attaching the criminal record and evidence that the data subject held invalid identity documents. The police officer claimed to have processed personal data with the aim of preventing violence. 

According to the police, a legal basis for this kind of processing was in principle [[Article 6 GDPR#1e|Article 6(1)(e) GDPR]], namely performance of a task carried out in the public interest. However, the police also acknowledged that the police officer exceeded the limits of their functions.

=== Holding ===
In the Latvian DPA’s opinion, the controller was the police as such. The Latvian law establishes in details the content of an application for temporary protection against violence. Even if personal data as the ones at issue may be processed for such a purpose, in this specific case information was obtained, submitted to the court and transferred to all parties involved in the proceeding on the police officer’s own initiative and without previous authorisation by the police. The processing was therefore unlawful and violated [[Article 5 GDPR|Articles 5]] and [[Article 6 GDPR|6 GDPR]]. The police also violated [[Article 24 GDPR#1|Article 24(1) GDPR]], as it did not establish a procedure for police officers to deal with similar cases. 

However, as the police officer acted in good faith to protect a natural person´s physical integrity, the DPA issued only a reprimand pursuant to [[Article 58 GDPR#2b|Article 58(2)(b) GDPR]].

== Comment ==
''Share your comments here!''

== Further Resources ==
''Share blogs or news articles here!''

== English Machine Translation of the Decision ==
The decision below is a machine translation of the Latvian original. Please refer to the Latvian original for more details.

<pre>
Municipality of Gulbene region

Expressed rebuke;
Obligation imposed

22.12.2022

Take effect

IK "Riga Communal Service"

Fine
EUR 500.00

02.12.2022
Appealed
SIA "W&amp;G"

Fine
EUR 500.00

30.11.2022
Take effect
SIA "Deprus"

Fine
EUR 500.00

29.09.2022.
Take effect
SIA "TET"

Fine
EUR 1,200,000.00

09.09.2022.
Appealed
Individual

Fine
EUR 200.00

02.09.2022.
Take effect
Municipal police of Cēsis region

Expressed rebuke;
Obligation imposed

18.08.2022.
Take effect
Individual

Fine
EUR 200.00

16.08.2022.
Take effect
SIA "DEPO DIY"

Fine
EUR 17,495.00
Obligation imposed

07.07.2022.
Take effect
SIA "Vidzeme Hospital".
Expressed rebuke

11.01.2022.
Take effect
Agency for International Youth Programs

Expressed rebuke;
Call for appropriate data processing

LIMITED AVAILABILITY
25.01.2022
Take effect
SIA "Solvers"
Expressed rebuke

27.01.2022
Take effect
SIA "Computer security technologies"
Expressed rebuke

27.01.2022
Take effect
SIA "SOAAR"

Fine
EUR 600.00

01.03.2022
Take effect
SIA "Tērbatas ezītis miglā"

Fine
EUR 500.00

02.03.2022.
Take effect
Riga municipality SIA "Rīgas Satiksme"

Expressed rebuke;
Call for appropriate data processing

11.03.2022.
Take effect
SIA "8 LOUNGE"

Fine
EUR 500.00

29.03.2022
Take effect
SIA "Your Move"

Fine
EUR 1464.13

21.04.2022.
Take effect
SIA "GelvoraSergel"
Expressed rebuke

09.05.2022.
Take effect
</pre>