Data Advocacy for Latvia
Latvia has implemented the EU Data Protection Directive and the EU Directive on Privacy and Electronic Communications through the Personal Data Protection Law (last amended on 7 March 2014) and the Law on Electronic Communications (last amended on 1 January 2017).
There are also specific rules for electronic documents, biometrics, medical services, debt collections services, e-commerce and telecommunications which provide stronger protection for the personal data subject.
Blaumana Street 11/13 11
Riga
LV 1011
Latvia Phone: +371 67 223 131
Fax: +371 67 223 556
E mail: [email protected]
There is no legal requirement to appoint a data protection officer (defined as a personal data protection specialist under the Personal Data Protection Law). However, a data controller is exempt from registering data processing activities with DSI if the data controller has appointed a data protection officer (‘DPO’).
The appointed DPO has the obligation to organise, control and supervise the compliance of data processing with the legal requirements. The DPO keeps a register with data and upon request of data subject or DSI it must disclose the information about:
- the name and contact details of the data controller
- the name and contact details of data controller’s representative (if any)
- the legal basis for the processing of personal data
- the list of categories of personal data that are being processed
- the purpose of the data processing
- the categories of data subjects
- the categories of recipients of personal data
- the intended method of processing of personal data
- the planned method of obtaining personal data
- the place of processing of personal data
- the holder of information resources or technical resources, as well as a person responsible for the security of the information system
- technical and organisational measures ensuring the personal data protection the type of personal data to be transferred outside EU/EEA.
The Electronic Communications Law provides the obligation for the providers of electronic communications services to immediately notify the DSI about the occurred breach of security. Within 30 days from the notification, the provider of electronic communications services must inform the DSI about:
- the types of personal data, categories of data subjects and data amount in respect of which personal data protection breach has occurred
- technical and organisational protection measures and means that were in place at the moment of the breach
- the measures taken to mitigate the consequences of the breach
- the consequences of the breach
- technical and organisational measures implemented after the breach
- carried investigation of the breach
- any third persons that are informed of this breach
- the fact whether the data subjects in respect of which the breach of personal data protection has occurred have been informed thereof.
Other data controllers that are not providers of publicly available electronic communications services do not have an obligation to notify individuals or DSI of the occurred data security breach.
Opt-in regime: no direct marketing electronic mail can be legally sent without the express consent of the receiver, unless a pre-existing business or commercial relationship exists. (Consent is however not mandated for marketing to legal persons.)
Also, a specific opt out must be offered with each message. Disguised sender identities are prohibited, and a valid return address must be provided.
The term “Opt-Out Rule” means that the sending of e-marketing to the recipient is permitted on an opt-out basis if:
the recipient’s details were originally collected “in the context of a sale”.
the entity sending the marketing is the same legal entity that collected the recipient’s details initially.
the marketing relates to “similar” products and/or services for which the recipient’s details were originally obtained.
the recipient is given the opportunity free of charge to object to the e-marketing, both at the time their details were collected and in each subsequent communication.
Applicable Legislation:
Law on Information Society Services dated 1 December 2014
First party e-marketing
(entity that collects the data will send the e-marketing itself)
B2C: Opt-in. Opt-out permitted where Opt-Out Rule applies.
B2B: Opt-out
Third party e-marketing
(entity that collects the data will share with third party partner for e-marketing)
B2C: Opt-in
B2B: Opt-in.
inbox.lv 406494
one.lv 72569
tvnet.lv 12557
apollo.lv 5564
delfi.lv 4535
e-apollo.lv 4078
navigator.lv 3290
balticom.lv 1840
mail.lv 1293
fc.lv 1252
orb.lv 942
4more.lv 810
latnet.lv 771
outlaw.lv 742
hotmail.lv 515
banda.lv 469
mpe.lv 467
ibox.lv 467
btv.lv 454
sveiks.lv 446
mits.lv 418
cc.lv 393
cau.lv 376
e-no.lv 367
navigators.lv 364
parks.lv 354
zb.lv 346
inox.lv 335
spam.lv 329
riga.lv 320
lu.lv 320
ml.lv 316
dautkom.lv 277
boldnet.lv 264
yandex.lv 238
lattelecom.lv 235
inbo.lv 231
draugiem.lv 226
rtu.lv 219
inbx.lv 208
boomtime.lv 205
hello.lv 202
livas.lv 198
va.lv 194
neolain.lv 189
lanet.lv 187
inboks.lv 186
kernel.lv 179
gmail.lv 170
345.lv 168
eriga.lv 162
amigo.lv 162
nbox.lv 152
pit.lv 146
ldz.lv 146
lvmail.lv 141
sseriga.edu.lv 137
met.lv 135
baltinet.lv 132
venta.lv 128
oto.lv 126
llu.lv 126
atech.lv 121
swedbank.lv 120
junik.lv 118
seb.lv 113
indox.lv 109
mfa.gov.lv 106
parex.lv 103
svnets.lv 97
69.lv 97
imbox.lv 96
no.lv 95
rpg.lv 94
pronets.lv 94
inkox.lv 94
airbaltic.lv 93
latvenergo.lv 92
bank.lv 92
fastnet.lv 91
one1.lv 88
inobx.lv 88
i-net.lv 86
tsi.lv 84
about.at.lv 84
spline.lv 83
friendsclub.lv 81
dva.lv 81
rss.lv 80
e-teliamtc.lv 78
promedia.lv 76
lmt.lv 75
jucom.lv 74
inboxs.lv 74
thema.de.lv 73
4nets.lv 73
mailbox.riga.lv 72
ba.lv 70
fastbox.lv 69
yahoo.lv 67
neonet.lv 67
cityline.lv 67
inbix.lv 66
hansabanka.lv 66
onbox.lv 64
lnt.lv 64
dnbnord.lv 64
infonet.lv 63
du.lv 63
dos.lv 62
bta.lv 62
ltv.lv 59
inboh.lv 59
balta.lv 56
rsu.lv 55
krassky.lv 55
edi.lv 55
bini.ch.lv 55
grindeks.lv 54
lkb.lv 53
sos.lv 52
email.lv 52
bmx.lv 52
vid.gov.lv 51
ventspils.gov.lv 51
silale.lv 51
rietumu.lv 51
e118.lv 51
uninet.lv 50
saeima.lv 50
eapollo.lv 50
bkc.lv 49
38.lv 48
radio.org.lv 47
ab.lv 47
ru.lv 46
iinbox.lv 46
dtc.lv 46
norvik.lv 45
ergo.lv 45
eclub.lv 45
rambler.lv 44
invox.lv 44
dot.lv 44
sta.lv 41
in.lv 41
lol.lv 40
bite.lv 40
aldems.lv 40
aircom.lv 40
outlook.lv 39
kir.ch.lv 39
ipasaule.lv 39
hhradio.lv 39
dienasmediji.lv 39
baltikums.lv 39
808.lv 39
ping.lv 38
oic.lv 38
oho.lv 38
kopideja.lv 38
face.lv 38
elkor.lv 38
vergs.lv 37
tv3.lv 37
td.lv 37
rigasvilni.lv 37
liaa.gov.lv 37
jpd.gov.lv 37
inboc.lv 37
i-izzi.lv 37
baltikom.lv 37
zm.gov.lv 36
tk.lv 36
telenet.lv 36
santa.lv 36
optiline.lv 36
human.lv 36
sok.lv 35
rs.gov.lv 35
rpiva.lv 35
privatbank.lv 35
lepjunet.lv 35
latio.lv 35
spils.lv 34
mikronet.lv 34
mail.eunet.lv 34
lvm.lv 34
loveis.lv 34
inboz.lv 34
if.lv 34
dza.lv 34
turiba.lv 33
biomed.lu.lv 33
liepu.lv 32
internet.lv 32
grafton.lv 32
fm.gov.lv 32
ctco.lv 32
7ka.lv 32
5005.lv 32
ne.lv 31
leta.lv 31
la.lv 31
elektrons-k.lv 31
dtg.lv 31
diena.lv 31
basnet.lv 31
olimps.lv 30
mono.lv 30
lg.lv 30
imagehouse.lv 30
alise.lv 30
wess.lv 29
vp.gov.lv 29
unbox.lv 29
legalize.lv 29
lattelekom.lv 29
kuldiga.lv 29
finieris.lv 29
com.lmt.lv 29
0ne.lv 29
rixc.lv 28
on.lv 28
inboox.lv 28
inboix.lv 28
fit.lv 28
fao.lv 28
citadele.lv 28
cesualus.lv 28
belam.lv 28
tkb.lv 27
osi.lv 27
mil.lv 27
latcom.lv 27
isl.edu.lv 27
inbokx.lv 27
groteks.lv 27
friendclub.lv 27
fms.lv 27
zednet.lv 26
valm.lv 26
tl.lv 26
petits.lv 26
nva.gov.lv 26
micronet.lv 26
latinsoft.lv 26
inspired.lv 26
innbox.lv 26
edan.lv 26
dobele.lv 26
vsaa.lv 25
valmiera.lv 25
six.lv 25
inlox.lv 25
ime.lv 25
hc.lv 25
em.gov.lv 25
zl.lv 24
seesam.lv 24
ostkom.lv 24
momail.lv 24
mail.teliamtc.lv 24
madona.lv 24
lv.lv 24
llkc.lv 24
inbxo.lv 24
inboxx.lv 24
hipo.lv 24
fenster.lv 24
bk.lv 24
telcobalt.lv 23
saldus.lv 23
rideit.lv 23
pvd.gov.lv 23
netmail.lv 23
mhm.lv 23
asd.lv 23
akira.lv 23
vzd.gov.lv 22
tilde.lv 22
stradini.lv 22
radioswh.lv 22
lrt.lv 22
inbpx.lv 22
gnt.lv 22
csb.gov.lv 22
zabor.lv 21
rbsskals.lv 21
olainfarm.lv 21
nite.lv 21
l4.lv 21
ibnox.lv 21
e-home.lv 21
domino.lv 21
daugavpils.lv 21
balsts.lv 21
vugd.gov.lv 20
tva.lv 20
tellus.lv 20
sss.lv 20
ssl.lv 20
rbs.lv 20
pentagons.lv 20
mccann.lv 20
lvceli.lv 20
lilita.lv 20
inbnox.lv 20
dome.liepaja.lv 20
bmwpower.lv 20
bas.lv 20
algs.lv 20
sexriga.lv 19
police.lv 19
pasts.lv 19
metalurgs.lv 19
luxdata.lv 19
lgs.lv 19
jnbox.lv 19
inet.lv 19
inb.lv 19
inbbox.lv 19
gjensidige.lv 19
dati.lv 19
citrus.lv 19
bsa.edu.lv 19
baltkom.lv 19
aldaris.lv 19
workingday.lv 18
vlasta.lv 18
vidm.gov.lv 18
superfm.lv 18
rsebaa.lv 18
mezaciems.lv 18
inbox.lv.lv 18
e-vidence.lv 18
csdd.gov.lv 18
boards.lv 18
andrews.lv 18
adverts.lv 18
1tv.lv 18
vss.lv 17
spektrs.lv 17
sabina-s.lv 17
riseba.lv 17
pornriga.lv 17
ogreland.lv 17
oe.lv 17
lvdats.lv 17
load.lv 17
laima.lv 17
lad.gov.lv 17
firstdata.lv 17
e-liepaja.lv 17
cosmos.lv 17
bakergroup.lv 17
autokada.lv 17
arbor.lv 17
ultracom.lv 16
tdc.lv 16
talsi.lv 16
star.lv 16
ss.lv 16
spx.lv 16
punk.lv 16
ok.lv 16
npfoods.lv 16
nibox.lv 16
moduls.lv 16
mgate.lv 16
maxima.lv 16
lvrtc.lv 16
linstow.lv 16
lawin.lv 16
km.gov.lv 16
kc.lv 16
kase.gov.lv 16
jvlma.lv 16
imnox.lv 16
ilva.lv 16
exigengroup.lv 16
elvabaltic.lv 16
domenikss.lv 16
clublife.lv 16
capital.lv 16
borenius.lv 16
autonams.lv 16
aslimnica.lv 16
archinteri.lv 16
apolo.lv 16
angels.lv 16
anet.lv 16
alida.lv 16
visc.gov.lv 15
versija.lv 15
varam.gov.lv 15
valka.lv 15
telegraf.lv 15
rezekne.lv 15
raplm.gov.lv 15
pgm.lv 15
lnb.lv 15
lb.lv 15
jt.lv 15
jak.lv 15
inbvox.lv 15
inbov.lv 15
ibbox.lv 15
gandrs.lv 15
ezernet.lv 15
drogas.lv 15
chamber.lv 15
bpgroup.lv 15
box.lv 15
bkus.lv 15
am.lv 15
aiesec.lv 15
21.lv 15
zvaigzne.lv 14
viaa.gov.lv 14
tukums.parks.lv 14
tele2.lv 14
talsos.lv 14
safemail.lv 14
runway.lv 14
rib.lv 14
rautakesko.lv 14
r6vsk.lv 14
proline.lv 14
narvesen.lv 14
mc2.lv 14
latgale.lv 14
jaffa.lv 14
ine.lv 14
impro.lv 14
grifsag.lv 14
dzintars.lv 14
dx.ez.lv 14
dpa.lv 14
dino.lv 14
db.lv 14
boot.lv 14
bb.lv 14
asdfg.lv 14
adati.lv 14
aa.lv 14
vm.gov.lv 13
tv5.lv 13
times.lv 13
tilts.lv 13
telia.lv 13
tbwa.lv 13
skontobuve.lv 13
rto.lv 13
providus.lv 13
president.lv 13
ntmedia.lv 13
ncs.lv 13
mooz.lv 13
microlines.lv 13
maksinets.lv 13
lizings.lv 13
lau.lv 13
ktf.rtu.lv 13
ksab.lv 13
kolumbs.lv 13
kekava.lv 13
interinfo.lv 13
inbiox.lv 13
gign.lv 13
fix.lv 13
drumandbass.lv 13
dome.jelgava.lv 13
di.lv 13
court.gov.lv 13
bt1.lv 13
bauska.lv 13
alpha.lv 13
you.lv 12
vgk.lv 12
vanillatravel.lv 12
unibanka.lv 12
tria.lv 12
tm.gov.lv 12
starlett.lv 12
rgsl.edu.lv 12
ravs.lv 12
raktuves.lv 12
preili.lv 12
plazaltd.lv 12
pirset.lv 12
pblc.lv 12
opera.lv 12
odnoklassniki.lv 12
mod.gov.lv 12
mk.gov.lv 12
mib.lv 12
mcd.lv 12
lutheran.lv 12
lscgroup.lv 12