Latvia Recording Laws: One-Party Consent Rules and Penalties (2026)

Overview of Latvia's Recording Laws

Latvia is a member state of the European Union located in the Baltic region of Northern Europe. The country's legal framework governing the recording of conversations draws from multiple sources: the Latvian Constitution (Satversme), the Criminal Law (Kriminallikums), the Operational Activities Law (Operativo darbību likums), the Electronic Communications Law (Elektronisko sakaru likums), and the EU General Data Protection Regulation as implemented by Latvia's Personal Data Processing Law.

Under Latvian law, a private individual who is an active participant in a conversation may record that conversation without informing or obtaining consent from the other parties. This places Latvia in the one-party consent category. However, the legality of making a recording is distinct from the legality of using or distributing that recording, which is governed by data protection legislation, defamation laws, trade secret protections, and any applicable confidentiality agreements.

Understanding these overlapping legal frameworks is essential for anyone who records conversations in Latvia, whether for personal, journalistic, legal, or business purposes.

Constitutional Protections for Privacy

The Latvian Constitution, known as the Satversme, establishes the foundational right to privacy in Article 96. This provision states that everyone has the right to inviolability of their private life, home, and correspondence.

The Constitutional Court of Latvia (Satversmes tiesa) has interpreted Article 96 broadly to include the protection of personal data. The court has confirmed that recording, storing, and sharing personal communications can constitute an interference with the right to private life protected under the Satversme.

Permissible Limitations Under Article 116

Article 116 of the Satversme permits restrictions on the rights guaranteed in Article 96, but only through laws that are necessary to protect the rights of other persons, the democratic structure of the state, public safety, welfare, and morals. Any restriction must be proportionate to its legitimate aim.

This constitutional framework means that while recording a conversation you participate in is permitted, distributing or publishing that recording in ways that infringe on another person's privacy could violate constitutional protections if the interference is not justified by a legitimate purpose.

Criminal Law Provisions on Recording and Privacy

Latvia's Criminal Law (Kriminallikums) contains several provisions relevant to recording and surveillance. The most directly applicable sections fall within Chapter XIV, which addresses offenses against the fundamental rights and freedoms of persons.

Section 144: Violation of Confidentiality of Correspondence and Telecommunications

Section 144 is the primary criminal provision governing unauthorized interception of private communications. The section provides:

Subsection (1): For a person who commits intentional violation of the confidentiality of personal correspondence, information in the form of transmissions over a telecommunications network, or the confidentiality of information and programs provided for use in connection with electronic data processing, the applicable punishment is deprivation of liberty for a term of up to two years, or temporary deprivation of liberty, or community service, or a fine.

Subsection (2): For a person who commits the same acts for the purpose of acquiring property, the applicable punishment is deprivation of liberty for a term of up to five years, or temporary deprivation of liberty, or community service, or a fine.

This section targets third-party interception of communications. It does not criminalize a participant in a conversation from recording that conversation, which is the basis for Latvia's one-party consent framework.

Section 143: Violation of the Inviolability of a Dwelling

Section 143 of the Criminal Law prescribes liability for illegal entry into a residence against the will of the person residing there. While not directly about recording, this provision is relevant when covert recording involves unauthorized entry into someone's home. Placing a hidden recording device inside another person's dwelling without authorization could trigger liability under this section in addition to Section 144.

One-Party Consent: What It Means in Practice

Latvia's one-party consent framework means that if you are a participant in a conversation, whether in person or over the phone, you may record that conversation without telling the other parties. This applies to both audio and video recording where you are physically present or actively participating in the call.

Phone Recordings

When you make or receive a phone call in Latvia, you are legally permitted to record the call as long as you are one of the parties to the conversation. There is no statutory requirement to announce that you are recording or to obtain the other party's consent before pressing record.

However, the subsequent use of that recording is subject to data protection rules. If you plan to share, publish, or use the recording for a purpose beyond your own personal reference, you must have a lawful basis under the GDPR to process the personal data contained in the recording.

In-Person Recordings

The same one-party consent principle applies to face-to-face conversations. If you are physically present in a conversation, you may record it. There is no distinction in Latvian law between recording a phone call and recording an in-person discussion, provided you are an active participant.

Recording a conversation to which you are not a party, whether by planting a hidden device, intercepting a phone line, or using other surveillance technology, is illegal under Section 144 of the Criminal Law and potentially under the Operational Activities Law as well.

Important Limitations

While making the recording may be legal, the following uses could expose you to civil or criminal liability:

• Publishing the recording in a way that violates someone's privacy rights under Article 96 of the Satversme
• Using the recording to defame someone under Latvia's civil liability provisions
• Disclosing trade secrets or confidential business information captured in the recording
• Violating the terms of a non-disclosure agreement or other contractual obligation

GDPR and Data Protection Requirements

As an EU member state, Latvia is subject to the General Data Protection Regulation (EU) 2016/679, which has applied directly since May 25, 2018. Latvia further implemented the GDPR through its Personal Data Processing Law (Fizisko personu datu apstrādes likums), which entered into force on July 5, 2018.

How GDPR Applies to Recordings

A recording of a conversation containing identifiable voices constitutes personal data under the GDPR. The act of recording, storing, reviewing, sharing, or deleting that recording is considered "processing" of personal data.

Any person or organization that records conversations must identify a lawful basis for processing under Article 6 of the GDPR. The six lawful bases are:

1. Consent of the data subject (the person being recorded)
2. Contractual necessity (the recording is needed to perform a contract)
3. Legal obligation (a law requires the recording)
4. Vital interests (the recording protects someone's life)
5. Public task (the recording is needed for an official function)
6. Legitimate interests (the recorder's interests outweigh the data subject's rights)

For most private recordings, the legitimate interest basis is the most commonly relied upon, provided the recorder can demonstrate that the purpose of the recording outweighs the privacy expectations of the recorded individual.

The Personal/Household Exemption

The GDPR includes a "household exemption" under Article 2(2)(c), which provides that the regulation does not apply to data processing carried out by a natural person in the course of a purely personal or household activity. This means that if you record a conversation purely for your own personal reference and do not share it publicly, the full weight of GDPR obligations may not apply.

Latvia's Personal Data Processing Law reinforces this exemption and extends it specifically to dash cameras used in road traffic and CCTV cameras used for personal household security, provided the surveillance does not cover public spaces on a large scale.

Data Protection Authority: Datu valsts inspekcija (DVI)

The Data State Inspectorate (Datu valsts inspekcija, or DVI) is Latvia's national supervisory authority for data protection. Established in 2001 and headquartered in Riga, the DVI enforces the GDPR and the Personal Data Processing Law.

The DVI has the power to investigate complaints, conduct audits, and impose administrative fines. Notable enforcement actions by the DVI include a 1.2 million euro fine against SIA TET in September 2022 for customer data processing violations, a 150,000 euro fine in November 2019 for transparency failures, and a 65,000 euro fine against Lursoft IT in November 2020 for publishing non-public register data.

GDPR Penalties

Violations of the GDPR in Latvia can result in administrative fines of up to 20 million euros or 4% of the organization's annual worldwide turnover, whichever is higher. In addition, Latvia's Criminal Law provides that illegal processing of personal data that causes material damage can result in imprisonment for up to five years.

Government and Law Enforcement Surveillance

The legal framework for government surveillance in Latvia is governed primarily by the Operational Activities Law (Operativo darbību likums) and supplemented by the Criminal Procedure Law (Kriminalprocesa likums).

The Operational Activities Law

The Operational Activities Law establishes the legal basis, principles, objectives, and procedures for covert investigative activities conducted by authorized state institutions. Under this law, operational activities include the use of audio and video recording equipment, technical surveillance tools, and electronic interception capabilities.

Only officials of state institutions specifically authorized by law may conduct operational surveillance activities. These authorized bodies include the State Police, the State Security Service, the Constitution Protection Bureau (SAB), the Military Intelligence and Security Service (MIDD), and other designated agencies.

Judicial Authorization Requirement

Wiretapping and the interception of private communications by law enforcement require prior authorization from an investigating judge. This judicial oversight requirement applies to:

• Telephone wiretapping and monitoring
• Interception of electronic communications (email, messaging)
• Covert audio recording of conversations where the surveilling party is not a participant
• Monitoring of mail and physical correspondence

The investigating judge must determine that the surveillance is necessary, proportionate, and that the information sought cannot reasonably be obtained through less intrusive means. Operational wiretapping may only be used to uncover crimes, not lesser criminal offenses.

Data Retention by Telecommunications Providers

Under Latvia's Electronic Communications Law (Elektronisko sakaru likums), telecommunications operators are required to retain certain call data for a minimum period of 18 months. As of the 2022 update implementing the European Electronic Communications Code (EECC), internet service providers must also retain specified user activity data.

Operators are strictly prohibited from disclosing any information about interception activities to the subjects of surveillance or to third parties, except where explicitly authorized by law.

Workplace Recording and Employee Monitoring

Workplace recording and employee monitoring in Latvia are governed primarily by the GDPR, Latvia's Personal Data Processing Law, and the Labour Law (Darba likums). There is no standalone Latvian statute specifically addressing workplace surveillance, so the general data protection framework applies.

Employer Obligations

Employers who wish to record telephone conversations, install CCTV cameras, or monitor electronic communications in the workplace must:

• Identify a lawful basis for the monitoring under GDPR Article 6
• Inform employees about the monitoring in advance, in accordance with GDPR Articles 13 and 14
• Conduct a Data Protection Impact Assessment (DPIA) if the monitoring involves systematic observation of employees or monitoring of publicly accessible areas
• Limit the monitoring to what is strictly necessary and proportionate to the stated purpose
• Establish clear retention periods and delete recordings when they are no longer needed

CCTV in the Workplace

Latvia's Personal Data Processing Law specifies minimum requirements for CCTV informative signs, which must include the name and contact information of the data controller, the purpose of the data processing, and information about how to exercise data subject rights under Article 13 of the GDPR.

Hidden surveillance cameras in the workplace are generally not permitted. The DVI and European Data Protection Board guidelines require transparency in employee monitoring. Covert recording of employees may only be justified in exceptional circumstances, such as when there is a reasonable suspicion of criminal activity and less intrusive methods have been exhausted.

Audio Recording of Employee Calls

Employers in financial services and other regulated industries may be required to record customer-facing telephone calls under the EU Markets in Financial Instruments Directive II (MiFID II). In such cases, the legal obligation provides the lawful basis under the GDPR, but employers must still inform employees and customers that calls are being recorded.

Recording in Public Places

Recording in public spaces in Latvia is generally permitted, but specific rules apply depending on the nature and scale of the recording.

Personal Photography and Video

Individuals may record in public places for personal purposes. The GDPR household exemption typically applies to casual photography and video recording for personal use, such as recording a family outing or a public event.

Journalism and Media

Latvia protects freedom of expression and press freedom under Article 100 of the Satversme and the relevant provisions of the European Convention on Human Rights. Journalists may record in public spaces, and the GDPR provides derogations for journalistic purposes.

The European Court of Justice addressed a relevant Latvian case, Buivids v. Datu valsts inspekcija (Case C-345/17), in which a Latvian citizen filmed police officers at a police station and uploaded the video to YouTube. The court ruled that the making and uploading of the video could constitute processing solely for journalistic purposes, provided the sole object was the disclosure of information, opinions, or ideas to the public.

Large-Scale Surveillance

CCTV surveillance of public areas on a large scale is subject to the full requirements of the GDPR, including conducting a Data Protection Impact Assessment, posting informative signage, establishing retention limits, and consulting with the DVI if the risk cannot be adequately mitigated.

Penalties Summary

Understanding the range of penalties for illegal recording and surveillance in Latvia is essential for compliance.

Criminal Penalties

Offense	Provision	Maximum Penalty
Unauthorized interception of communications	Criminal Law Section 144(1)	Up to 2 years imprisonment
Same offense committed for financial gain	Criminal Law Section 144(2)	Up to 5 years imprisonment
Illegal processing of personal data causing material harm	Criminal Law	Up to 5 years imprisonment
Unauthorized entry into a dwelling (e.g., to plant a recording device)	Criminal Law Section 143	Criminal liability with imprisonment

Administrative Penalties (GDPR)

Violation Type	Maximum Fine
Standard GDPR violations	Up to 10 million euros or 2% of global turnover
Serious GDPR violations (unlawful processing, consent violations)	Up to 20 million euros or 4% of global turnover
Administrative sanctions against liable officials	Up to 1,000 euros

Civil Liability

Individuals whose privacy rights have been violated by unlawful recording may pursue civil claims for damages. The limitation period for GDPR compensation claims in Latvia is five years.

Business Compliance Guidelines

Organizations operating in Latvia that record conversations or conduct surveillance should follow these compliance steps to minimize legal risk.

Before Recording

1. Identify the lawful basis under GDPR Article 6 for the recording activity
2. Conduct a Data Protection Impact Assessment if the recording involves systematic monitoring, large-scale processing, or surveillance of publicly accessible areas
3. Draft a privacy notice that clearly explains the recording activity, its purpose, the legal basis, retention period, and data subject rights
4. Implement technical safeguards including access controls, encryption, and secure storage for recordings

During Recording

5. Provide notice to individuals being recorded through verbal announcements, signage, or automated messages at the start of calls
6. Limit the scope of recording to what is strictly necessary for the stated purpose
7. Train employees on recording policies and data protection obligations

After Recording

8. Establish retention schedules and delete recordings promptly when they are no longer needed
9. Respond to data subject requests including access, erasure, and portability requests within the GDPR's one-month timeframe
10. Report data breaches involving recordings to the DVI within 72 hours and to affected individuals without undue delay if the breach poses a high risk

Comparison With Neighboring Countries

Latvia's one-party consent approach is shared by several of its neighbors and trading partners, though important differences exist.

Estonia, Latvia's northern neighbor, also follows a one-party consent framework with similar GDPR obligations. Lithuania, to the south, likewise permits one-party consent recording with GDPR overlay requirements.

By contrast, many Western European countries such as Germany and France impose stricter consent requirements for recording. Organizations doing business across multiple EU jurisdictions should carefully review the specific recording laws of each country where they operate.