The State Data Inspectorate (DVI) of Latvia has opened an investigation concerning a security incident notified by the Road Traffic Safety Directorate (CSDD).

The incident potentially allowed unauthorized persons to access personal data held by the CSDD. The DVI's investigation aims to assess the circumstances, the extent of the affected data, and the measures implemented by the CSDD. The authority will verify whether the technical and organizational measures were adequate and if additional actions could have prevented or mitigated the consequences of the incident. According to public information, the data concerned may include name, surname, personal identification number, vehicle registration number, payment information, and address. Depending on the results, the DVI may conclude the absence of a violation or impose corrective measures and/or a fine.

The supervisory authority specified that individual complaints are not necessary, as it has already initiated the procedure. It reminded that individuals who believe they have suffered material or non-material damage due to the breach must address civil courts to seek redress from the data controller, as this procedure is not within the competence of the Inspectorate.