Continue reading on DataGuidance with:
Free Member
Limited ArticlesCreate an account to continue accessing select articles, resources, and guidance notes.
Already have an account? Log in
Create an account
Join our community for free to access exclusive whitepapers, reports, and regulatory information.
Latvia: DVI publishes guide on health data processing by health insurers
On July 24, 2024, the Data State Inspectorate (DVI) published a guide for insurers on whether they are allowed to collect personal health data to process a claim upon receiving a compensation application.
The DVI reminded that Latvian legislators have determined that insurance companies have the right to process health data under the Insurance Contract Law which states that the insurer has the right to request the necessary information from the insured person or from medical institutions. However, the DVI also notes that in light of the principle of minimization, the law also stipulates that the insurer may process health data only to the extent necessary to achieve the specific purpose.
Furthermore, the DVI advises insurers, as responsible controllers, to justify why data processing is necessary to achieve a specific goal and evaluate the validity of each information request to ensure compliance with the principle of accountability. The DVI also obliges the insurance company to guarantee the security of the data processed by ensuring that their employees process the data available to them in a legal manner, including with respect to confidentiality.
You can read the press release, only available in Latvian, here.
Send us your Feedback!
Please let us know what you think of DataGuidance! It will only take 60 seconds and help us make the site better for you.
