Latvia

Section 9(1) of the Labour Law bars an employer from imposing sanctions or other adverse consequences on an employee who reports suspected criminal or administrative offences at work to competent authorities, and Section 9(2) puts the burden of proof on the employer in a dispute.

The Data State Inspectorate's page on data subject rights lists the rights under GDPR Articles 15-22 and requires the controller to respond within one month of receiving a request (Article 12(3)). The page cites no sections of the Personal Data Processing Law for these rights.

Section 11 requires due diligence before a business relationship is established, for occasional transactions of EUR 15,000 or more, for transfers and crypto-asset transactions of EUR 1,000 or more, and where laundering is suspected. If it cannot be completed, the subject must not start the relationship, or must end it without delay, and report suspected laundering to the FIU. Section 11.1 covers ongoing measures and Section 15 bans anonymous accounts.

Section 18 requires subjects who find discrepancies between the beneficial-owner data they ascertain and the Register of Enterprises to report them to the Register within three working days. Section 18 also sets how the beneficial owner is determined and verified.