GPS and worker monitoring in Latvia: what you need to stay compliant

What you need

For each obligation we tell you whether it applies in this country: Yes means required, It depends means only in certain cases, No means not required.

• Balancing test before processing and prior notice to workers (DVI)

  Yesrequired

  Before starting the processing, the employer must assess the balance between its own interest and the worker's interest, and must inform the worker before they begin using the vehicle, in a transparent way and in plain language.

  DVI (Garante lettone), posso tracciare i viaggi del mio dipendente? (GPS)

• Basis = legitimate interest, not consent (DVI)

  Yesrequired

  The basis is the employer's legitimate interest; the worker's consent cannot be obtained as a valid basis within the employment relationship.

  DVI, videosorveglianza dei dipendenti in presenza (16/09/2022)

• Prior authorisation from an authority before installing

  Nonot required

  Latvian data processing law does not provide for a prior authorisation by the DVI; the controller assesses lawfulness on its own.

  DVI (Garante lettone), posso tracciare i viaggi del mio dipendente? (GPS)

• No processing during private use of the vehicle; no continuous surveillance

  Yesrequired

  The employer has neither a basis nor a right to process data for the period in which the worker uses the vehicle for private purposes; continuous surveillance lacks adequate justification.

  DVI (Garante lettone), posso tracciare i viaggi del mio dipendente? (GPS)

• Impact assessment (DPIA) for workplace surveillance and systematic monitoring of employees (DVI list)

  Yesrequired

  The DVI list makes the impact assessment mandatory for workplace surveillance, systematic monitoring of employees' activities and large-scale tracking.

  DVI, lista dei trattamenti che richiedono una DPIA (art. 35.4)

The procedure, step by step

1. 1

   Carry out the balancing test before starting the processing.

2. 2

   Identify a valid legal basis (legitimate interest, not consent).

3. 3

   Inform workers before they begin using the vehicle, in a transparent and plain way.

4. 4

   Carry out the impact assessment (DPIA) for workplace surveillance.

5. 5

   Configure the system: no processing during private use, no continuous surveillance.

6. 6

   If you switch systems: when you change your monitoring system or software, update and re-issue the privacy notice, and check whether the national agreement or authorisation for remote monitoring needs renewing. The provider (data processor), the data collected and the methods often change: the one provided earlier is not enough.

Who to contact

What you risk

Sources

• DVI (Garante lettone), posso tracciare i viaggi del mio dipendente? (GPS)
• DVI, videosorveglianza dei dipendenti in presenza (16/09/2022)
• DVI, videosorveglianza dei dipendenti nel lavoro da remoto
• DVI, lista dei trattamenti che richiedono una DPIA (art. 35.4)
• DVI, presentare un reclamo
• Regolamento UE 2016/679 (GDPR)