Datu valsts inspekcija/Data State Inspectorate of Latvia

What Datu valsts inspekcija/Data State Inspectorate of Latvia does

Datu valsts inspekcija (the Data State Inspectorate of Latvia) is a Latvian government regulatory authority established on January 2, 2001, operating under the supervision of the Cabinet of Ministers. It functions as Latvia's national supervisory authority under the EU General Data Protection Regulation (GDPR), with statutory responsibility for overseeing data protection compliance across the country's public and private sectors.

The Inspectorate delivers a portfolio of free services to citizens, public bodies, and private organizations. Core offerings include an online Data Protection Impact Assessment (DPIA) tool called NIDA, a multilingual e-learning platform branded DLPDP, phone-based consultations, a formal qualification examination for data protection specialists, published guidelines, and public-information campaigns such as #DVIskaidro. Approximately 11 staff are based at the Riga headquarters, and Director Jekaterina Macuka has led the institution since February 27, 2020. The Inspectorate is a member of the European Data Protection Board (EDPB) and participates in cross-border initiatives, including the EU Horizon 2020 SMOOTH project. Selected operational work — such as conference delivery and IT development — is contracted to private vendors including SIA 3K MANAGEMENT, SIA ABC idea, and True Bits SIA.

The institution operates under a non-commercial model. It is funded through the Latvian state budget; all services provided to data subjects, controllers, and processors are free of charge. There is no fee-for-service pricing, no customer billing, and no commercial go-to-market motion. Multi-year strategic direction is set through an Action Strategy covering 2026–2030, indicating planned consolidation and digital service expansion over the medium term.

Name

Datu valsts inspekcija/Data State Inspectorate of Latvia

Legal name

Datu valsts inspekcija

Website

https://dvi.gov.lv

Company type

Private

Founded year

2001

Operating status

Operating

Headcount range

11–50 employees

Short description

Datu valsts inspekcija is Latvia's national data protection supervisory authority under GDPR, established in 2001. Operating under the Cabinet of Ministers with about 11 staff, it provides free regulatory guidance, the NIDA DPIA tool, and DLPDP e-learning to data subjects and controllers nationwide.

Ownership category

akta.pro rank

Product category

Data Protection Regulation

NAICS

Regulation, Licensing, and Inspection of Miscellaneous Commercial Sectors (926150)

akta.pro industry

PRIMARYBPAIAOAH

Data Protection, Privacy & Cybersecurity Regulators

Business & Public Services/Public Sector & Government Administration/Regulatory Agencies & Licensing (Cross-sector)

Keywords

• Data protection authority
• GDPR supervisory authority
• Personal data regulation
• Data protection compliance
• Privacy enforcement

Headquarters

HQ city

Riga

HQ country

Latvia

HQ region

Europe

Offices1 record

Markets served

GTM type

B2B and B2C

Offering type

Services

Cost components

Personnel, Operations, Technology or R&D, Infrastructure, Others

Distribution channels5 records

Marketing channels7 records

Core offering

The Data State Inspectorate of Latvia (Datu valsts inspekcija) is the national supervisory authority for personal data protection under the General Data Protection Regulation (GDPR). It supervises personal data processing activities of public and private organizations, handles data subject complaints, issues binding decisions, administers fines, and provides free regulatory guidance and educational tools such as the NIDA DPIA tool and a trilingual e-learning platform.

Product overview

Datu valsts inspekcija (Data State Inspectorate of Latvia) is Latvia's supervisory authority for personal data protection under the GDPR, operating as a direct administrative institution under the Cabinet of Ministers. The Inspectorate does not offer commercial technology products but provides regulatory services including: the NIDA tool for Data Protection Impact Assessments, a free e-learning course on personal data protection (available in Latvian, English, and Russian), phone consultation services, guidelines and recommendations for data controllers, and the official Data Protection Specialist qualification examination. The Inspectorate also maintains tools for client due diligence oversight and data processing register analysis. The organization focuses on supervising GDPR compliance, handling complaints, issuing guidance, and promoting public awareness of data protection rights and obligations.

Differentiator

Problem solved

Functional benefit

Products and services

• NIDA rīks (Data Protection Impact Assessment Tool) A tool that helps data controllers develop and demonstrate compliance with GDPR by facilitating the conduct of Data Protection Impact Assessments, which have been mandatory for certain processing activities since May 25, 2018. It is intended for organizations acting as controllers or processors.
• Free E-learning Course on Personal Data Protection (DLPDP) Free online training program on data protection available in three languages (Latvian, English, Russian), developed under the DLPDP project to educate the public and small and medium enterprises about GDPR requirements.
• Klienta izpētes rīks (Client Due Diligence Tool) A tool that lists issued licenses for client due diligence tool operations, providing oversight of entities authorized to perform customer due diligence in Latvia.
• Data Protection Specialist Qualification Examination An official examination organized by the Inspectorate that individuals must pass to obtain data protection specialist qualification, with subsequent requirements for maintaining and improving qualifications over time.
• Phone Consultations (Telefonkonsultācijas) Telephone consultation services provided to private individuals and public institutions regarding personal data processing and protection, with three dedicated phone lines for data subject rights, controller/processor responsibilities, and public sector inquiries.
• Data Processing Register and Risk Analysis Tool A tool to help controllers maintain data processing registers and conduct risk analysis for GDPR compliance.
• Guidelines and Recommendations (Vadlīnijas un rekomendācijas) Sector-specific guidelines and recommendations published by the Inspectorate to help organizations understand and comply with data protection requirements.
• SMOOTH Cloud Platform (GDPR Compliance for SMEs) Cloud platform developed under the EU Horizon 2020 SMOOTH project (H2020-DS-08-2017, No. 786741) to help small and medium enterprises comply with GDPR requirements, made available in Latvian through the Inspectorate's participation.

Segments4 records

Ideal customer profiles4 records

Technology focussed No

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Feature3 records

Partnerships

Four partnerships are on record, tiered core.

• True Bits SIA (visidati.lv)coreTechnology or IntegrationTechnology partner providing the e-learning platform www.visidati.lv for registration and participant tracking during Inspectorate-organized seminars and training courses for data protection specialists.
• SIA 3K MANAGEMENTcoreImplementation/ SI/ Consulting PartnerEvent organizer for conferences such as 'Personas dati – nākotnes perspektīva!' (Personal Data – Future Perspective) organized by the Data State Inspectorate.
• SMOOTH Project Consortium (H2020-DS-08-2017, No. 786741)coreStrategic or Co-development PartnerEU Horizon 2020 funded project developing a cloud platform to help small and medium enterprises comply with GDPR requirements. The Inspectorate participates as a consortium partner, providing expertise and making the platform available in Latvian.
• European Data Protection Board (EDPB)coreStrategic or Co-development PartnerThe Inspectorate participates as Latvia's representative in the European Data Protection Board, contributing to the development of consistent GDPR application across EU member states.

Scale indicators1 record

Recent moves6 records

Expansion highlights5 records

Broad incumbents

• Data Protection Commission (DPC) Ireland: Ireland's national DPA and the lead supervisory authority for most major US tech firms under the GDPR one-stop-shop regime. Functions as a high-budget incumbent counterpart and a benchmark for institutional scale DVI does not match.
• Commission Nationale de l'Informatique et des Libertés (CNIL): France's national DPA, one of the most established and well-resourced regulators in the EU. A broad incumbent peer representing the upper bound of national DPA capability against which DVI's smaller operations are typically measured.
• Spanish Data Protection Agency (AEPD): Spain's national DPA with a broader mandate including digital-rights and minor-protection extensions. A larger incumbent peer whose expanded scope signals a possible future direction for smaller DPAs such as DVI.

Direct peers

• Hungarian National Authority for Data Protection and Freedom of Information (NAIH): Hungary's national DPA with supervisory, registration, and enforcement powers under GDPR. Comparable in being a mid-sized EU member-state data protection authority with EDPB participation.
• State Data Protection Inspectorate of Lithuania (VDAI): Lithuania's national data protection supervisory authority. The Baltic counterpart to DVI, sharing cross-border case flow, joint EDPB voting, and similar-sized institutional capacity.
• Estonian Data Protection Inspectorate (AKI): Estonia's national data protection supervisory authority under GDPR Article 51. As a fellow small Baltic EU member-state DPA, AKI is the most direct operational peer to DVI in terms of mandate, headcount scale, and supervisory focus.
• Polish Personal Data Protection Office (UODO): Poland's national DPA. Performs the same GDPR Article 51 supervisory functions as DVI across a larger jurisdiction, providing a useful scale-comparison peer.
• Czech Office for Personal Data Protection (ÚOOÚ): The Czech Republic's independent DPA with enforcement, complaint-handling, and registration functions analogous to DVI's. A direct peer across EU member-state supervisory duties.
• Austrian Data Protection Authority (DSB): Austria's federal DPA. Comparable scope of national-level GDPR supervision, registers of data protection officers, and SME-facing guidance — a small- to mid-sized peer authority adjacent to DVI.

Regional players

• Information Commissioner's Office (ICO) — United Kingdom: The UK's independent data protection authority, formerly the UK's GDPR lead and now operating under the UK GDPR regime. A region-specific peer with established DPIA guidance, certification, and SME-compliance tooling analogous to DVI's mandate (though outside the EU EDPB framework post-Brexit).

Market position

Strengths5 records

Weaknesses5 records

Competitive moat2 records

Key risks5 records

Key highlights6 records

Customer concentration

• Xx.com/dvigovlv
• Facebookfacebook.com/dvigovlv
• LinkedInlinkedin.com/company/datu-valsts-inspekcija-data-state-inspectorate-of-latvia
• Instagraminstagram.com/dvigovlv

Revenue estimate

Valuation estimate

Number of profiles

Profiles1 record

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Datu valsts inspekcija/Data State Inspectorate of Latvia