Latvian DVI Outlines Actions Post-DPO Appointment

On 27 May 2024, the Latvian Data State Inspectorate (DVI) released a comprehensive guide detailing the steps organizations must follow after appointing a Data Protection Officer (DPO). This reminder serves to highlight the DPO’s critical role as a liaison between the organization, the DVI, and data subjects.

Key Responsibilities

• Inform the DVI: Organizations must notify the DVI of the DPO’s appointment, providing the DPO’s name, contact information, and the organization’s name. If multiple controllers appoint a DPO, all must be listed and the document signed by each.
• Notify Citizens: The DPO’s contact information must be accessible to data subjects. This information should be included in the organization’s privacy policy on its website or provided through other convenient methods, such as email or in-person during data processing initiation.
• Update Changes: Any changes in the DPO’s contact details or replacement must be promptly reported to the DVI and communicated to data subjects, ensuring that the information remains current.
• Report Terminations: If the DPO’s contract ends without immediate replacement, the DVI must be informed. Organizations must ensure continuous data protection by promptly appointing a new DPO when required.
• Employee Awareness: Staff should be informed about the DPO, enabling them to assist data subjects and coordinate with the DPO regarding data processing activities.

Appointment Guidelines

• Certification and Expertise: A DPO can be:
• A specialist who has passed the DVI’s qualification exam and is listed in the DVI’s registry.
• A professional with sufficient practical and theoretical knowledge in data protection, regardless of DVI listing.
• Contract Basis: The DPO can be appointed through an employment contract or an outsourcing agreement.

Additionally, organizations should have contingency plans to delegate DPO duties temporarily during illness or other incapacities to ensure continuous compliance.

👉 Find the guidance here.