Cybersecurity Policy Report, Latvian DPA Seeks Comments on Proposed DPIA Guidelines, (Jul 16, 2024)
By Tony Foley
The Data State Inspectorate (DVI), Latvia’s data protection authority, announced yesterday that it had invited industry experts and other interested parties to provide feedback on a developed draft of guidelines designed to advise data controllers on the conduct of data protection impact assessments (DPIAs).
The guidelines, which may be accessed from the announcement but are available only in Latvian, explain that a DPIA is the process by which an organization identifies possible risks to natural persons that could arise from the planned processing, carries out a risk inventory analysis, and identifies possible consequences, including their severity and probability. The guidelines explain cases in which a DPIA is required, recommending specific courses of actions in given cases, starting from the stage when preparations for a DPIA are underway to assess the need to perform one and ending with the stage in which the DPIA has been carried out.
Commenters may submit a questionnaire via a link provided in the announcement. The DVI is accepting comments through Sept. 10.
News: InternationalLegislation DataPrivacy DataSecurity