- Enforcing jurisdiction
- Latvia · Geography does not establish applicable law.
- Confirmed applicable legislation
- Privacy topics
DPA case 04.11.2025 – €150 Fine (Latvia, 2025)
Privacy enforcement record
This record is classified outside cookie consent. Subject classification does not confirm an applicable law. It is not included in cookie statistics or the Risk Calculator.
A police inspector accessed personal data from the Ministry of Interior's database without permission and shared it in a Discord group. This action violated data protection rules because the inspector had no legal reason to access or share the information. The case highlights the importance of protecting personal data and the consequences of unauthorized access.
What happened
A police inspector accessed and shared personal data from the Ministry of Interior's database without legal justification.
Who was affected
The personal data of a specific individual was affected, including their name, identification number, and image.
What the authority found
The DPA ruled that the inspector processed personal data without a valid legal basis, breaching GDPR rules.
Why this matters
This case emphasizes that even law enforcement personnel must adhere to data protection laws. It serves as a reminder for all organizations to ensure their employees understand the legal boundaries of data access.
View original scraped data
Original imported citations before automated processing; the processing history does not establish independent verification.
Source checks
Linked-source text retrieved.
Automated check recorded — 18 October 2026.
Processing notes: articles corrected.
Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources
In January 2025, a police inspector accessed the Ministry of Interior’s database outside of working hours, and retrieved personal data of the data subject (name, surname, personal identification number, date of birth, image, declared place of residence). The inspector transferred this personal data to a third party in a Discord group ("Playing Runelite"), publishing the data subject’s image and other personal information. The data subject then filed a complaint with the DPA. The inspector claimed to have suffered fraud from the data subject, and that he obtained the data to help recover his funds. The DPA carried out an analysis of the facts at hand, and in particular whether the police inspector's action adhered to data processing principles. It held that the inspector processed the personal data without any legal basis and for personal purposes, in breach of Article 5(1)(a) and Article 6(1) GDPR. As a result, the DPA imposed an administrative fine of €150 on the inspector.
Related Enforcement Actions (0)
No other enforcement actions found for DPA case 04.11.2025 in LV
This is the only recorded action for this entity in this jurisdiction.
Details
About this data
Cite as: Cookie Fines. DPA case 04.11.2025 - Latvia (2025). Retrieved from cookiefines.eu
Last updated: