Data breach in 42 Latvian municipalities: DVI imposes 300,000 euro fine on ZZ Dats

According to LETA, the Data State Inspectorate (DVI) has imposed a 300,000 euro fine on SIA “ZZ Dats” in connection with last year’s municipal data breach, affecting 42 Latvian municipalities; the company has appealed the decision in court. The inspectorate said the data were stored in an information system maintained by ZZ Dats.

Upon receiving information about a possible violation, the Inspectorate opened an investigation and found the company guilty of failing to fulfil the processor’s obligations in accordance with Article 32 of the General Data Protection Regulation (GDPR). For the violation identified, the company received an administrative penalty—a €300,000 fine. ZZ Dats has appealed the decision to Riga City Court. In relation to the breach, decisions were also made regarding the municipalities involved—they received reprimands, the DVI said.