Latvia

SIA "ZZ Dats"

300,000 €

GDPR enforcement action by Data State Inspectorate (DSI) on 2025-10-28.

Rank · Sector

#23

of 356 in Public Sector and Education

Rank · Latvia

of 6

Rank · All fines

#302

of 3,042

Case details

Authority: Data State Inspectorate (DSI)
Date: 2025-10-28
Controller / Processor: SIA "ZZ Dats"
Sector: Public Sector and Education
Quoted Articles: Art. 32 GDPR
Type of violation: Insufficient technical and organisational measures to ensure information security

Summary

The Latvian DPA has imposed a fine of EUR 300,000 on SIA "ZZ Dats". The entity that was fined was the data processor for almost all local governments in Latvia. It failed to implement adequate technical and organisational measures to ensure data security, resulting in a data breach. The entity appealed the decision to the Riga City Court.

Open original source Links to the regulator's original publication or another source.