Latvia PDPL supervisory authority regime. Section 35 Powers of the Data State Inspectorate - DVI investigative + corrective + authorisation + advisory powers (GDPR Article 58 implementation): investigations (notifications + audits + on-site inspection + access to premises and data) + reprimands + warnings + temporary or definitive bans on processing + order to bring processing into compliance + suspend data flows + administrative fines up to EUR 20M or 4% global turnover (GDPR Article 83) + DVI sole supervisory authority for Latvia + Lead Supervisory Authority for Latvia-headquartered controllers under GDPR One-Stop-Shop. Section 40 Complaint Handling - data subjects may complain directly to DVI + DVI registers + investigates + responds within reasonable timeframe + redress + judicial review by Administrative District Court of Riga. Section 45 Certification Bodies - voluntary DVI-accredited certification mechanisms for controllers + processors demonstrating GDPR compliance + DVI-published criteria + ISO 27701 ISMS-P + Europrivacy + other EDPB-approved schemes. Section 55 Codes of Conduct - DVI-approved codes for sectors (healthcare + banking + telecommunications + advertising + research) + EDPB co-approval for cross-border codes + sectoral self-regulation supplemented by DVI oversight + Latvian Association of Personal Data Specialists.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.