The State Data Inspectorate of Latvia (DVI) has published clarifications on the personal data that can be legally collected when gathering signatures to support an initiative.

The authority reminds that the nature of the data requested depends on the purpose of the collection. When the procedure is governed by law, such as for a bill registered with the Central Election Commission, the collection of the name, surname, personal identification number, and date of signature is justified to verify eligibility and uniqueness of support. However, providing a phone number cannot be a condition for signing; if it is requested for subsequent communications, its collection must be optional and the person must be informed. Organizers can only require data strictly necessary for the intended purpose.

Collectors must also ensure transparency by clearly informing signatories about the identity of the controller and the purpose of the collection, in accordance with the purpose limitation principle set out in Article 5, paragraph 1, point b) of the GDPR. Appropriate security measures must be implemented, especially for paper-based collections, by preventing the consultation or photographing of previous signatories' data and not leaving lists unattended, pursuant to Article 5, paragraph 1, point f) and Article 32 of the GDPR.