Cybercrime policies/strategies
The Cyber Security Strategy of Latvia 2014-2018 was adopted by the Cabinet of Ministers (government) in January 2014.
On 17 September 2019, the Cabinet of Ministers approved the informative report ‘Cyber Security Strategy of Latvia for 2019-2022’. The cyber security policy aims to strengthen and improve cyber security capabilities by boosting resilience against cyber-attacks and enhancing public awareness of threats in cyberspace. To achieve its objective, policy proposes actions in five areas: enhanced cyber security and manageable digital security risks; resilience of ICT systems; better universal access to strategic ICT systems and services; public awareness, education and research; international cooperation; rule of law in cyber space and cyber-crime prevention.
Cybercrime legislation
State of cybercrime legislation
Latvia signed (05.05.2004) and ratified (14.04.2007) Budapest Convention on Cybercrime. The CoE Convention on Cybercrime and its Additional Protocol concerning the criminalisation of acts of a racist and xenophobic nature committed through computer systems is applicable in Latvia from 1 June 2007.
In Latvia, like in a number of other EU Member States, there is no common definition of "cybercrime"; there are cyber-dependent crime and cyber-enabled crime (or crime with an online element).
Criminal Law includes the following crimes:
1. Arbitrary Accessing Automated Data Processing Systems (section 241),
2. Interference in the Operation of Automated Data Processing Systems and Illegal Actions with the Information Included in Such Systems (section 243),
3. Illegal Operations with Automated Data Processing System Resource Influencing Devices (section 244),
4. Acquisition Equipment, Development, Alterations, Storage and Distribution of Data, Programs and Equipment for Illegal Activities with Electronic Communications Network Terminal (section 2441),
5. Violation of Safety Provisions Regarding Information Systems (section 245).
In addition, criminal law also includes the following infringement:
1. Violation of Provisions Regarding the Demonstration of a Pornographic Performance, Restriction of Entertainment of Intimate Nature and Handling of a Material of Pornographic Nature (section 166),
2. Fraud in an Automated Data Processing System (section 1771), Infringement of Copyright and Neighbouring Rights (section 148).
Besides, Copyright Law was adopted on 06.04.2000
Substantive law
The Criminal Code of Latvia provides an exhaustive substantive law framework, addressing all offences provided by the Budapest Convention.
Substantive law provisions can thus be found in the following legal acts:
2) Electronic Communications Act
3) Cabinet regulation No. 820 adopted 4 December 2007 "Procedures by which Pre-trial Investigative Institutions, Bodies Performing Investigatory Operations, State Security Institutions, Office of the Prosecutor and Court Request and a Merchant of Electronic Communications Transfers Data to be retained, and Procedures by which Statistical Information regarding Requests of Data to be Retained and Issuing thereof is Compiled"
Procedural law
In terms of procedural powers, Criminal Procedure Code provides all relevant procedural powers also found in the Convention, with exception of production orders provided under the Electronic Communications Act. It has to be noted that Latvia uses national regulations on data retention to enact preservation powers (Article 16 and 17 of the Budapest Convention) in practice.
Procedural law provisions can thus be found in the following legal acts:
1) Criminal Procedure Code Art. 190,191 and 192;
2) Law on the Exchange of Information for the prevention, detection and investigation of criminal offences as well as by some international legal acts.
Safeguards
General rules and safeguards are applied.
Related laws and regulations
In addition to the laws and regulations expect above mentioned:
Law On the Security of Information Technologies - 2010 (English).
Specialised institutions
Latvian 24/7 contact point cooperates with specialized Cybercrime investigation unit of the Economic Crimes Enforcement Department of the Central Criminal Police Department.
On October 5, 2006, the Latvian 24/7 point of contact was established within State Police Central Criminal Police Department of International Cooperation Department in accordance with the law “Convention on Cybercrime and Additional Protocol to the Convention on Cybercrime, Concerning the Criminalization of Acts of a Racist and Xenophobic Nature” Article 6, and with Article 35 of the Convention on Cybercrime. The ICB is composed of the 1st Unit (Operational cross-border cooperation (24/7) and SIS/SIRENE) of the International Cooperation department
The operational 24/7 contact point (CP) is the 1st Unit of the International Cooperation Department (Unit) of the Central Criminal Police Department of the State Police.
The Unit acts as an international criminal judicial cooperation "front office", providing a single point of contact (SPOC) by coordinating all international exchange of information in the 24/7 regime (Interpol, Europol, SIRENE, cooperation in criminal matters, cybercrime contact point). Thus, Latvia has implemented a "one stop shop" concept by including all the international police cooperation services in a common data acquisition and processing flow.
The CP’s competences:
- providing and exchanging information between Latvian and foreign law enforcement agencies 24/7;
- assisting Latvian and foreign law enforcement agencies in combating and prevention of organized crime, cybercrime and illegal immigration;
- dealing with persons identification, check of documents, search of wanted and missing persons, search of stolen vehicles and items;
- coordination of involved authorities in cases of prevention and investigation of cross-border crimes, including police cooperation in the framework of Schengen convention (For instance, Article 40-41);
- general police co-operation (Article 39 of Schengen Convention);
- Swedish initiative (Council Framework Decision 2006/960/JHA);
- Prüm hit follow-up procedure
The CP officers have investigative powers and applies any investigative measure task related to activities within criminal case. CP also provides instant support in order to perform investigation or criminal proceedings; in addition, it collects electronic evidence in relation to various types of offences.
The legal basis for the operations of the State Police is the Constitution of the Republic of Latvia, international agreements, Law on Police, other laws and regulatory enactments of the Republic of Latvia, and decisions of local governments, if they are not contrary to the laws of the Republic of Latvia.
Function of ICD which is dedicated to tackling cybercrime is based on 2001 Convention on Cybercrime and Directive 2013/40/EU of the European Parliament and of the Council of 12 August 2013 on attacks against information systems.
Latvian Computer Emergency Response Team - CERT.LV (in Latvian; in English)
International cooperation
Competent authorities and channels
Latvia has implemented a “one stop shop” philosophy by including all the international police cooperation services in a common data acquisition and processing flow. International Cooperation department (ICD) is a part of Central Criminal Police Department of the State Police of Latvia. The legal basis for the operations of the State Police is the Constitution of the Republic of Latvia, international agreements, Law on Police, other laws and regulatory enactments of the Republic of Latvia, and decisions of local governments, if they are not contrary to the laws of the Republic of Latvia.
Function of ICD which is dedicated to tackling cybercrime is based on 2001 Convention on Cybercrime and Directive 2013/40/EU of the European Parliament and of the Council of 12 August 2013 on attacks against information systems.
International police cooperation in Latvia provides services via Interpol, Europol information exchange channels and via 24/7 Contact Point network.
24/7 Contact point (Article 35)
Operational Coordination and Informative Supply Unit of the International Cooperation Bureau of the Central Criminal Police Department of the State Police - authorized to send/receive and follow up to requests for preservation
MLA
According to the Criminal Procedure Law (Article 846 on the competent authorities in the examination of a request of a foreign state):
- in the pre-trial proceedings: the General Prosecutor’s Office examines and decides a request of a foreign state; up to the commencement of criminal prosecution also the State Police;
- after transfer of a case to a court: the Ministry of Justice examines and decides a request of a foreign state.
Practical guides, templates and best practices
Latvia signed and ratified Budapest Convention on Cybercrime. As well as on 05.10.2006 joined additional Protocol to the Convention on Cybercrime, concerning the criminalisation of acts of a racist and xenophobic nature committed through computer systems.
In case of cooperation with EU Member States concerning the investigation of cybercrimes data retention and obtaining of preserved information is possible in the frame of so called “Swedish Initiative” (Council Framework Decision 2006/960/JHA on simplifying the exchange of information and intelligence between law enforcement authorities of the Member States of the European Union).
Jurisprudence/case law
Sources and links
- GENVAL - Evaluation report on the seventh round of mutual evaluations "The practical implementation and operation of European policies on prevention and combating Cybercrime" - Report on Latvia
- Other GENVAL 7th round evaluation reports
- The Cyber Security Strategy of Latvia 2014-2018
- IT and IS Security Experts Group (DEG)

These profiles do not necessarily reflect official positions of the States covered or of the Council of Europe.
Are you aware of the latest legislative or policy developments on cybercrime and electronic evidence?
Share this information with us helping to keep this platform up to date.
- Cybercrime website
- Template: Mutual Legal Assistance Request for subscriber information (Art. 31 Budapest Convention). English and bilingual versions available.
- Template: Data Preservation Request (Articles 29 and 30 Budapest Convention). English and bilingual versions available.