Prosecutors to examine CSDD officials over data leak

Latvia’s Prosecutor General’s Office will examine the responsibility of officials and employees of the Road Traffic Safety Directorate (CSDD) in connection with a large-scale data leak, LSM reported. The review was launched at the request of President Edgars Rinkēvičs.

The office’s Department for the Protection of National Security is examining whether violations or negligence allowed data to leak from CSDD information systems covering the period since 2008. The leak may have affected individuals’ and the state’s rights and legitimate interests and significantly threatened national security.

The review will assess the possible responsibility of officials and employees of CSDD and other related companies for the leak, the Prosecutor General’s Office said.

On August 14, the State Police’s Cybercrime Enforcement Department launched criminal proceedings over unauthorised access to an automated data-processing system and unlawful actions involving devices used to affect such systems. Investigators are seeking to identify the person who deliberately targeted the state information system containing the national register of vehicles and their drivers, managed by CSDD.

The Data State Inspectorate has also launched an investigation. It will assess the justification and compliance with data protection rules of CSDD’s decision to retain the data. The inspectorate said personal data do not have one universal retention period, as this depends on the purpose and legal basis for processing and other requirements.