The State Data Inspectorate (DVI) of Latvia has initiated a public consultation regarding a draft guideline on managing personal data breaches.

This draft aims to provide practical support to organizations and data protection officers to identify, assess, and manage data breaches. It details the steps to prepare for incidents, respond after their discovery, conduct an investigation, assess the impact on individuals, and decide on the necessity to notify the DVI or inform the data subjects. Special attention is given to the interaction between data breaches and cyber incidents, technical and organizational security measures, internal reporting and investigation procedures, as well as documentation. The document includes a practical methodology to assess the impact of a breach based on the nature of the data, context, and circumstances. Experts and interested parties are invited to submit their comments before 23 October 2026.