By passing a landmark ruling (C-311/18 Data Protection Commissioner v Facebook Ireland and Maximillian Schrems of 16 July 2020) which emphasises the basic right to privacy when personal data is transferred to third countries, the Court of Justice of the European Union (“CJEU”) has again confirmed how important it is to maintain a high level of protection of personal data being transferred from the EEA to third countries. The ruling has raised a number of questions about the legal basis for personal data transfers to third countries. As the ruling focuses on transfers to the US, this article explores some of the steps companies should take with the ruling in force.
Each company’s day-to-day work involves communicating with suppliers, distributors and customers. We often see that company employees are not aware that the way they carry out their daily responsibilities can be treated as part of a breach of competition law, which can result in their company facing fines and reputation damage. Even a single email your employee sends in the course of business might contribute to a breach of competition law and make the regulator suspicious. To avoid this, employees as well as management should be aware of risks associated with their day-to-day work and potential breaches of competition law.
Under the Taxes and Duties Act and the State Revenue Service (“SRS”) Act, the tax authority has a wide range of tasks and responsibilities in tax administration. The SRS monitors the economic and financial activities conducted by all entities and individuals and enforces compliance with the tax laws. To fulfil its statutory responsibilities, the SRS carries out various control measures, from ones that can go unnoticed by the taxpayer until a certain moment to serious inspections requiring the taxpayer’s presence. This article explores thematic reviews as well as their substance, key aspects, and expected outcomes.
The mass media have recently reported news of the largest fine in Latvia to date (EUR 150,000) being levied on an e-commerce company for breaches involving failure to comply with requirements of the General Data Protection Regulation (“GDPR”). Considering the company’s circumstances, as cited by the National Data Office in its decision, this article explores requirements that must be met by any company processing personal data on its website to steer clear of the fine prescribed by the GDPR.
The topic continued from MindLink.lv news 24.07.2020. Based on EU and Latvian legislation, in 2019 the Financial Intelligence Unit drew up guidelines, describing methods for identifying politically exposed persons (“PEPs”).
Although the Anti Money Laundering and Counter Terrorism and Proliferation Financing (“AML/CTPF”) Act has been in force for more than ten years, some of the entities governed by the Act still find it difficult to identify the status of a “politically exposed person.”