Makes insurance decisions, in Latvia

Regulation (EU) 2016/679, Arts. 13(2)(f), 14(2)(g), 15(1)(h) and 22 · Read the law's page

• Give a person in Latvia a path to obtain human intervention, express their view, and contest a decision made solely by automated processing that produces a legal or similarly significant effect on them, under GDPR Article 22.
• Do not subject a person in Latvia to a decision based solely on automated processing, including profiling, that produces legal effects concerning them or similarly significantly affects them, unless the decision is necessary for entering into or performing a contract with them, is authorised by Union or Member State law that also lays down suitable measures to safeguard their rights, or rests on their explicit consent, under GDPR Article 22(1) and (2).
• Do not base a solely automated decision with legal or similarly significant effects on a person in Latvia on the special categories of personal data in GDPR Article 9(1), unless they gave explicit consent or the processing is necessary for reasons of substantial public interest on the basis of proportionate Union or Member State law, and suitable measures to safeguard their rights are in place, under GDPR Article 22(4).
• If you make solely automated decisions about a person in Latvia of the kind GDPR Article 22(1) and (4) describe, including profiling, tell them so and give them meaningful information about the logic involved and the significance and envisaged consequences for them: when you collect their data, within the Article 14(3) period where you obtained it from someone else, and in answering their access request, under GDPR Articles 13(2)(f), 14(2)(g) and 15(1)(h).

Mākslīgā intelekta centra likums, adopted by Saeima 6 March 2025, published in Latvijas Vēstnesis No. 55 (2025); in force 20 March 2025

Finanšu tirgus digitālās darbības noturības un mākslīgā intelekta izmantošanas likums, 7. pants, 8. panta piektā līdz septītā daļa, 10. panta trešā un ceturtā daļa, 11. panta otrā daļa · Read the law's page

• If you are a financial market participant named in Articles 4 and 5, or the savings and loan association named in Article 6(1), point 5, meet the requirements of Regulation (EU) 2024/1689 on the use of AI, which the Bank of Latvia supervises (Articles 7 and 8(5)).when it serves a financial business
• Do not use an AI practice that Article 5 of the Regulation prohibits (Article 11(2), point 1).when it serves a financial business
• Meet the obligations that Articles 16, 22, 23, 24 and 26 of the Regulation place on providers, authorised representatives, importers, distributors and deployers of high-risk AI systems (Article 11(2), points 2 to 6).when it serves a financial business
• Meet the transparency duties of providers and deployers in Article 50 of the Regulation (Article 11(2), point 10).when it serves a financial business
• Give the Bank of Latvia and notified bodies correct, complete and truthful information when they ask for it (Article 11(2), point 11).when it serves a financial business
• Stop the activity immediately when the Bank of Latvia requires it after finding a breach (Article 10(4), point 1).for a financial business

Regulation (EU) 2024/1689, Arts. 5, 50 — directly applicable in Latvia as EU Member State; VARAM designated as lead competent authority per Cabinet of Ministers information report of 25 February 2025

• Do not use AI systems for social scoring of people.
• Do not deploy real-time remote biometric identification in publicly accessible spaces without authorisation.
• Do not deploy AI systems that exploit people's vulnerabilities.
• If operating a chatbot or voice interaction system, tell users at the outset that they are interacting with AI.
• If providing a generative AI system, mark its outputs in a machine-readable format.