Back to Frameworks

Latvia Personal Data Processing Law (Fizisko personu datu apstrades likums, 2018)

Latvia (EU)
vLaw of 21 June 2018 (in force 5 July 2018) as amended by the laws of 23 May 2019 and 6 May 2021; version in force from 4 June 2021
5 domains
12 controls

Latvia's Personal Data Processing Law, the national law that sits beside the GDPR: what it adds for controllers and processors (a child's consent from 13, the minimum content of a video surveillance sign, one-year retention of audit trails, national limits on access requests, derogations for research, archiving, statistics and journalism, the data protection officer list, cooperation with inspections) and the Data State Inspectorate's list of processing that always needs a DPIA, with the Inspectorate's organisation and powers.

Verified

Latvia Personal Data Processing Law (Fizisko personu datu apstrades likums, 2018) is a compliance framework from Latvia (EU) with 5 domains and 12 controls that map to 48 other frameworks. The largest domains are Chapter VIII: Data processing and rights of a data subject – Latvia Personal Data Processing Law (Fizisko personu datu apstrades likums, 2018) (8 controls), Chapter IV and Section 5: Inspections by the Data State Inspectorate – Latvia Personal Data Processing Law (Fizisko personu datu apstrades likums, 2018) (1 controls), Chapter V: Data protection officer – Latvia Personal Data Processing Law (Fizisko personu datu apstrades likums, 2018) (1 controls). Every control below carries what it requires and what an assessor expects to see.

Maintained by Gerard BlokdykVerified against the published standard Control text last updated

Framework summaries on this platform are interpretations grounded in the published source, for educational and compliance planning purposes. They do not reproduce or replace the official standards. Refer to the authoritative source for the definitive text. Framework names and trademarks belong to their respective organisations.

Framework Domains (5)

Chapter IV and Section 5: Inspections by the Data State Inspectorate – Latvia Personal Data Processing Law (Fizisko personu datu apstrades likums, 2018)

1 controls
Controls in the Chapter IV and Section 5: Inspections by the Data State Inspectorate – Latvia Personal Data Processing Law (Fizisko personu datu apstrades likums, 2018) domain of Latvia Personal Data Processing Law (Fizisko personu datu apstrades likums, 2018): 1 controls
CodeTitle
latvia-personal-data-processing-law-fizisko-personu-datu-apstrades-likums-2018::S.15-S.5Section 15 with Section 5(1) Cooperation with Inspectorate inspections and marking of restricted information

Chapter V: Data protection officer – Latvia Personal Data Processing Law (Fizisko personu datu apstrades likums, 2018)

1 controls
Controls in the Chapter V: Data protection officer – Latvia Personal Data Processing Law (Fizisko personu datu apstrades likums, 2018) domain of Latvia Personal Data Processing Law (Fizisko personu datu apstrades likums, 2018): 1 controls
CodeTitle
latvia-personal-data-processing-law-fizisko-personu-datu-apstrades-likums-2018::S.17Section 17 with Section 18(3) Appointment of the data protection officer

Chapter VI: Certification bodies and code of conduct monitoring bodies – Latvia Personal Data Processing Law (Fizisko personu datu apstrades likums, 2018)

1 controls
Controls in the Chapter VI: Certification bodies and code of conduct monitoring bodies – Latvia Personal Data Processing Law (Fizisko personu datu apstrades likums, 2018) domain of Latvia Personal Data Processing Law (Fizisko personu datu apstrades likums, 2018): 1 controls
CodeTitle
latvia-personal-data-processing-law-fizisko-personu-datu-apstrades-likums-2018::S.21-22Sections 21 and 22 Accreditation of certification bodies and licensing of code of conduct monitoring bodies

Chapter VIII: Data processing and rights of a data subject – Latvia Personal Data Processing Law (Fizisko personu datu apstrades likums, 2018)

8 controls
Controls in the Chapter VIII: Data processing and rights of a data subject – Latvia Personal Data Processing Law (Fizisko personu datu apstrades likums, 2018) domain of Latvia Personal Data Processing Law (Fizisko personu datu apstrades likums, 2018): 8 controls
CodeTitle
latvia-personal-data-processing-law-fizisko-personu-datu-apstrades-likums-2018::S.27Section 27 Restrictions on the right of access
latvia-personal-data-processing-law-fizisko-personu-datu-apstrades-likums-2018::S.28Section 28 Processing in the official publication
latvia-personal-data-processing-law-fizisko-personu-datu-apstrades-likums-2018::S.29-31Sections 29 to 31 Derogations for statistics, archiving in the public interest and research
latvia-personal-data-processing-law-fizisko-personu-datu-apstrades-likums-2018::S.32Section 32 Processing for journalistic, academic, artistic or literary expression
latvia-personal-data-processing-law-fizisko-personu-datu-apstrades-likums-2018::S.33Section 33 Child's consent to information society services: age 13
latvia-personal-data-processing-law-fizisko-personu-datu-apstrades-likums-2018::S.34Section 34 Further processing in the area of criminal law
latvia-personal-data-processing-law-fizisko-personu-datu-apstrades-likums-2018::S.36Section 36 Video surveillance and dashboard cameras
latvia-personal-data-processing-law-fizisko-personu-datu-apstrades-likums-2018::S.37Section 37 Audit trails: retention limit and access requests

Data State Inspectorate list of processing requiring a DPIA – Latvia Personal Data Processing Law (Fizisko personu datu apstrades likums, 2018)

1 controls
Controls in the Data State Inspectorate list of processing requiring a DPIA – Latvia Personal Data Processing Law (Fizisko personu datu apstrades likums, 2018) domain of Latvia Personal Data Processing Law (Fizisko personu datu apstrades likums, 2018): 1 controls
CodeTitle
latvia-personal-data-processing-law-fizisko-personu-datu-apstrades-likums-2018::DVI.DPIAData State Inspectorate list under Article 35(4) GDPR (Order No. 1-2.1/125 of 18 December 2018) Processing that always requires a DPIA in Latvia

Your Compliance Coverage

If you comply with Latvia Personal Data Processing Law (Fizisko personu datu apstrades likums, 2018), you already cover:

Maps to 48 other frameworks

20 total controls
PDPA Singapore
1 source controls mapped|1 target controls covered
5%
Vietnam PDPD
1 source controls mapped|1 target controls covered
5%
Vermont Data Privacy and Online Surveillance Act
1 source controls mapped|1 target controls covered
5%
Turkey KVKK
1 source controls mapped|1 target controls covered
5%
Rhode Island Data Transparency and Privacy Protection Act (RIDTPPA)
1 source controls mapped|1 target controls covered
5%
Qatar DPL
1 source controls mapped|1 target controls covered
5%
Privacy Act 2020
1 source controls mapped|1 target controls covered
5%
Privacy Act 1988 (Australia)
1 source controls mapped|1 target controls covered
5%
POPIA
1 source controls mapped|1 target controls covered
5%
Peru DPL
1 source controls mapped|1 target controls covered
5%
Personal Data Act (personopplysningsloven)
1 source controls mapped|1 target controls covered
5%
PDPA Thailand
1 source controls mapped|1 target controls covered
5%
Pakistan Personal Data Protection Bill 2023
1 source controls mapped|1 target controls covered
5%
Oregon Consumer Privacy Act
1 source controls mapped|1 target controls covered
5%
NRF Cybersecurity and Data Privacy Framework (National Retail Federation)
1 source controls mapped|1 target controls covered
5%
NIST SP 800-122
1 source controls mapped|1 target controls covered
5%
NIST Privacy Framework
1 source controls mapped|1 target controls covered
5%
Nigeria Data Protection Regulation (NDPR)
1 source controls mapped|1 target controls covered
5%
Nigeria Data Protection Act 2023 (NDPA)
1 source controls mapped|2 target controls covered
5%
Nebraska Data Privacy Act
1 source controls mapped|2 target controls covered
5%
New Jersey Data Privacy Act
1 source controls mapped|1 target controls covered
5%
New Hampshire Data Privacy Act
1 source controls mapped|1 target controls covered
5%
Montana Consumer Data Privacy Act
1 source controls mapped|1 target controls covered
5%
Minnesota Consumer Data Privacy Act
1 source controls mapped|1 target controls covered
5%
Mexico LFPDPPP
1 source controls mapped|1 target controls covered
5%
Mauritius DPA
1 source controls mapped|1 target controls covered
5%
Maryland Online Data Privacy Act of 2024
1 source controls mapped|1 target controls covered
5%
Malaysia PDPA 2010
1 source controls mapped|1 target controls covered
5%
Liechtenstein DPA
1 source controls mapped|1 target controls covered
5%
LGPD
1 source controls mapped|1 target controls covered
5%
Ecuador Ley Orgánica de Protección de Datos Personales (LOPDP)
1 source controls mapped|1 target controls covered
5%
Law No. 172-13 on the Protection of Personal Data
1 source controls mapped|1 target controls covered
5%
Section 508 - ICT Accessibility (Revised)
1 source controls mapped|2 target controls covered
5%
Singapore Government Instruction Manual on ICT&SS Management (IM8)
1 source controls mapped|1 target controls covered
5%
US Consumer Product Safety Act (CPSC) Manufacturer and Importer Duties
1 source controls mapped|1 target controls covered
5%
ISO 8000 - Data Quality
1 source controls mapped|1 target controls covered
5%
Azure Security Benchmark
1 source controls mapped|1 target controls covered
5%
Authorised Economic Operator (AEO) Programmes - Global Standards
1 source controls mapped|1 target controls covered
5%
Switzerland New Federal Act on Data Protection (nFADP/nDSG, 2023)
1 source controls mapped|2 target controls covered
5%
Bahrain PDPL
1 source controls mapped|1 target controls covered
5%
APPI
1 source controls mapped|1 target controls covered
5%
COSO Internal Control - Integrated Framework (2013)
1 source controls mapped|2 target controls covered
5%
GDPR
1 source controls mapped|1 target controls covered
5%
WHO Global Strategy on Digital Health 2020-2025
1 source controls mapped|2 target controls covered
5%
Saudi Arabia PDPL
1 source controls mapped|1 target controls covered
5%
UK Open Banking Standard
1 source controls mapped|1 target controls covered
5%
DAMA-DMBOK2 - Data Management Body of Knowledge (2nd Edition)
1 source controls mapped|1 target controls covered
5%
Barbados Data Protection Act 2019
1 source controls mapped|1 target controls covered
5%

Coverage is not the same as your position

This page shows what Latvia Personal Data Processing Law (Fizisko personu datu apstrades likums, 2018) overlaps with in general. Where your organisation actually stands, against the standard you are going for and the certifications you already hold, is a different question. Same graph and the same recorded refutations, scoped to you rather than to a pair.

The Compliance Position Diagnostic, $5,000 fixed, ten business days

What is Latvia Personal Data Processing Law (Fizisko personu datu apstrades likums, 2018) and who does it apply to?

Latvia Personal Data Processing Law (Fizisko personu datu apstrades likums, 2018) is a compliance framework from Latvia (EU) with 5 domains and 12 controls. Latvia's Personal Data Processing Law, the national law that sits beside the GDPR: what it adds for controllers and processors (a child's consent from 13, the minimum content of a video surveillance sign, one-year retention of audit trails, national limits on access requests, derogations for research, archiving, statistics and journalism, the data protection officer list, cooperation with inspections) and the Data State Inspectorate's list of processing that always needs a DPIA, with the Inspectorate's organisation and powers. It is used by organisations to establish and maintain compliance with industry standards and regulatory requirements.

What does Latvia Personal Data Processing Law (Fizisko personu datu apstrades likums, 2018) actually require?

Latvia Personal Data Processing Law (Fizisko personu datu apstrades likums, 2018) has 12 controls organised across 5 domains. The largest domains are Chapter VIII: Data processing and rights of a data subject – Latvia Personal Data Processing Law (Fizisko personu datu apstrades likums, 2018) (8 controls), Chapter IV and Section 5: Inspections by the Data State Inspectorate – Latvia Personal Data Processing Law (Fizisko personu datu apstrades likums, 2018) (1 controls), Chapter V: Data protection officer – Latvia Personal Data Processing Law (Fizisko personu datu apstrades likums, 2018) (1 controls). Each control defines specific requirements that organisations must implement to achieve compliance.

If I already comply with another framework, how much of Latvia Personal Data Processing Law (Fizisko personu datu apstrades likums, 2018) do I already cover?

Latvia Personal Data Processing Law (Fizisko personu datu apstrades likums, 2018) maps to 48 other compliance frameworks. The top mapping partners are PDPA Singapore (5% coverage), Vietnam PDPD (5% coverage), Vermont Data Privacy and Online Surveillance Act (5% coverage). Use our comparison tool to explore control-level mappings between frameworks.

How do I implement Latvia Personal Data Processing Law (Fizisko personu datu apstrades likums, 2018)?

Start your Latvia Personal Data Processing Law (Fizisko personu datu apstrades likums, 2018) compliance journey by running a self-assessment on our platform to identify your current compliance posture. Our AI advisory can answer specific questions about Latvia Personal Data Processing Law (Fizisko personu datu apstrades likums, 2018) requirements, and cross-framework mapping helps you leverage existing controls from other frameworks you may already comply with. Create a free account to access all 12 controls and track your progress.

Start Your Compliance Journey

Create a free account to run self-assessments, get AI advisory, and track your compliance progress across 1,062 frameworks.

Get Started Free →

Free forever, no credit card required