Company – Fine (Latvia, 2022)
General GDPR enforcement action
This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.
Latvia's data protection authority found that a company issued loyalty cards to customers without having a proper reason for collecting their personal information. This matters because businesses must have a legal basis for processing customer data. Although no fine was imposed, the decision highlights the importance of following data protection rules.
What happened
A company issued loyalty cards to customers without a valid legal basis for processing their personal data.
Who was affected
Customers who received loyalty cards from the company.
What the authority found
The Latvian DPA decided that issuing loyalty cards without a valid legal basis violated GDPR's requirements for data processing.
Why this matters
This case underscores the necessity for companies to ensure they have a legitimate reason to collect and use customer data, even for seemingly harmless activities like loyalty programs. It serves as a reminder to review data practices to comply with GDPR.
GDPR Articles Cited
The Latvian DPA has fined a company for issuing loyalty cards to customers without a valid legal basis.
Related Enforcement Actions (0)
No other enforcement actions found for Company in LV
This is the only recorded action for this entity in this jurisdiction.
Details
Fine Date
1 January 2022
Authority
Datu valsts inspekcija
Enforcement Tracker ID
ETid-1906
About this data
Cite as: Cookie Fines. Company - Latvia (2022). Retrieved from cookiefines.eu
Last updated: