- Enforcing jurisdiction
- Latvia · Geography does not establish applicable law.
- Confirmed applicable legislation
- Privacy topics
DPA case SIA "SOAAR" – €800 Fine (Latvia, 2023)
Privacy enforcement record
This record is classified outside cookie consent. Subject classification does not confirm an applicable law. It is not included in cookie statistics or the Risk Calculator.
A company was fined €800 for not cooperating with a data protection investigation. They failed to provide information about how they processed audio recordings of customers. This case shows that companies must respond to data protection authorities and comply with requests for information.
What happened
The company did not respond properly to a request from the data protection authority regarding customer audio recordings.
Who was affected
Customers whose audio recordings were processed by the company.
What the authority found
The DPA fined the company for not providing necessary information during an investigation.
Why this matters
This ruling stresses the importance of cooperation with data protection authorities. Companies should be proactive in responding to inquiries to avoid fines.
View original scraped data
Original imported citations before automated processing; the processing history does not establish independent verification.
Source checks
Linked-source text retrieved.
Automated check recorded — 18 October 2026.
Processing notes: national law identified.
Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources
The controller allegedly processed personal data - and specifically audio recordings containing the voice of their customers – in an unlawful way. The Latvian DPA asked the controller to provide information concerning the processing in the context of an ex officio investigation. The controller first asked for the deadline to be extended and then stopped replying to the DPA. Thus, the Latvian DPA opened a sanctioning procedure against the controller. After that, the controller replied to the DPA’s request and provided the information. The DPA noted how Article 58(1)(e) GDPR provides supervisory authorities with the power to obtain from controllers and processors access to all personal data and information necessary for the performance of its tasks. The notification procedure followed by the DPA to request access to such information respected all the formal requirements under Latvian law. In light of the above, the DPA decided to issue a €800 fine against the controller. In the determination of the amount of the sanction, the fact that the controller had been already reprimanded for similar circumstances was considered an aggravating factor. On the other hand, the fact that the controller eventually complied with the DPA’s request played a role as a mitigating factor.
Related Enforcement Actions (0)
No other enforcement actions found for DPA case SIA "SOAAR" in LV
This is the only recorded action for this entity in this jurisdiction.
Details
About this data
Cite as: Cookie Fines. DPA case SIA "SOAAR" - Latvia (2023). Retrieved from cookiefines.eu
Last updated: