Data Protection Laws and Freedom of Expression: Latvia
Constitutional/Primary Law Background - see also ECHR and EU Charter
Article 100 of the contemporary Latvian Constitution (1922 reinstated 1991 and as revised 2016) prohibits censorship and guarantees freedom of expression including the right to freely receive, keep and distribute information and express views. Article 113 separately recognizes the freedom of scientific research, artistic and other creative activity. Whilst there is no constitutional right to data protection as such, article 96 provides for the inviolability of private life, home and correspondence.
The first relevant protection of freedom to express and disseminate thoughts (but only within the limits prescribed by law) as well as inviolability of domicile (but again subject to searches as provided by law) may be traced to articles 37 and 33 of the Fundamental Laws of the Russian Empire 1906. The original Latvia Constitution of 1922 did not expressly include these rights and this was likewise the case when it was first reinstated in the early 1990s. The current rights cited above were introduced as a result of a new fundamental rights chapter (Chapter 8) being inserted into the Constitution in 1998.
First-Generation Statutory Law
Latvia did not adopt any data protection statute during the first-generation period. |
Second-Generation Statutory Law
Latvia initially passed the Data Protection Act with a view to implementing Directive 95/46 on 23 March 2000. The Act was subsequently amended several times. Latvia joined the EU on 1 May 2004.
Special Expression Derogation
Article 5 of the Latvian Personal Data Protection Act set out a derogation for journalistic purposes in accordance with the Law on the Press and other Mass Media and also artistic or literary expression, all subject to such activity not being prescribed by other law. This established an exemption from the legitimating grounds for processing, sensitive data rules and proactive transparency rules but qualified this by stating that in applying these exemptions ‘the rights of persons to the inviolability of private life and freedom of expression shall be observed’. The data quality principles remained applicable without restriction and there was no special provision related to the international data transfer conditions. The law also set out an exemption from the requirement to notify processing with the DPA (art. 21(2)(3)) but not health data or criminal-related data were processing, where an international data transfer was foreseen or (from 2006) where data was used provide financial services, market or public opinion research, commercial recruitment services, or lotteries (art. 21(3)). Oversight by both the DPA and the courts were not explicitly qualified.
Broad Expression Derogation
No specific provision was adopted.
Personal Exemption
Latvia established an exemption for personal or household and family purposes but subjected this to the condition that such data were not disclosed to other persons (art. 3(3)).
Knowledge Facilitation Framework
Necessary processing of personal data for scientific and statistical research was exempted from the compatibility principle so long as this did not violate the rights of the data subject (art. 10(2)). From 2002 processing for the establishment of the Latvian National Archives was exempted from the time limitation and accuracy/rectification principles (art. 10(3)). An exemption was provided from the reactive transparency rules (subject access) and the rights to rectification and erasure where processed data was used exclusively for scientific or statistical research and would not serve as a basis for decisions regarding the affected data subject and (from 2002) similarly for the Latvian National Archives (art. 17). The sensitive data rules were only exempted from application where processing either took place for the establishment the Latvian National Archive Foundation and was performed by the State archives or institutions of the state or was for statistical research carried out by the Central Statistics Bureau (art. 11). From 2009, an exemption from the requirement to notify processing with the DPA was provided for processing carried out for scientific, statistical and genealogical research purposes (art. 21(2)(8)) and, from 2007 with the ‘Law on Archives’, for archiving purposes (art. 21(2)(4)). No derogation was provided from the proactive direct transparency rule. Unlike in Directive 95/46, the disproportionate effort (and impossibility) limitation on the proactive transparency rule when information was not collected direct from the data subject was limited to processing for scientific, historical or statistical research or the establishment of the Latvian National Archive Foundation (art. 9(3)(2)).
|
Third-Generation Statutory Law
On 20 June 2018, the Latvian Parliament a third-generation Data Protection Act which inter alia implemented the GDPR.
Special Expression Derogation
The law sets out a general exemption for processing for journalistic purposes as well as the purposes of academic, artistic and literary expression. This is subject to (i) compliance with the provisions being incompatible or preventing the exercise of freedom of expression and information, and (ii) processing being in compliance with the rights of person to private life and any interests of the data subject insofar as these override the public interest. In addition, as regards journalism only, it was specified that (iii) processing taking place for the purpose of publishing information which affects the public interest (art. 32). This special expression provision did explicitly establish its priority over the Knowledge Facilitation Framework.
Broad Expression Derogation
No specific provision was adopted.
Personal Exemption – see GDPR, art. 2(2)(c)
Knowledge Facilitation Framework – see also GPDR, art. 5(1)(b) (compatibility), art. 5(1)(e) (time limits) and art. 89(1) (appropriate safeguards)
Where data are processed for statistical purposes, the rights of the data subject specified in arts. 15, 16, 18 and 21 GDPR are not applied in so far as they may prevent or significantly impede the achievement of the specific intentions and the derogations are necessary to reach the objective (art. 29). The exact same exemptions are set out as regards processing for scientific or historical research purposes (art 31). Articles 18-21 of the GDPR are excluded on same basis where data are processed for archival purposes in the public interest in order to create, accumulate, evaluate, maintain the use of ‘national documentary heritage’. It is stated that the data subject may exercise their rights under art. 15 and 16 GDPR in line with archiving regulations. However, arts. 18-21 GDPR are exempted from application (art. 30). Latvia has failed to set out a sui generis knowledge facilitation vires for processing sensitive data.
|