The Data State Inspectorate ('DVI') announced, on 25 July 2022, that the Baltic data protection authorities ('the Baltic DPAs') of Estonia, Latvia, and Lithuania had launched a coordinated preventive supervision on the compliance of personal data processing in the field of short-term vehicle rental. In particular, the DVI noted that the coordinated supervision follows from the 2021 meeting of the Baltic DPAs, during which the authorities agreed to organise sectoral monitoring in Estonia, Latvia, and Lithuania in 2022, with the aim of developing recommendations for improving the processing and protection of personal data.

In addition, the DVI stated that the Baltic DPAs have agreed that supervision will be carried out on enterprises offering the rental of short-term vehicles, including electric scooters, whose main recipient of services are natural persons. Furthermore, the DVI outlined that the primary focus will be on traders whose main place of business is in one of the Baltic States and who offer their services throughout the Baltics. However, the DVI highlighted that with respect to its decision-making independence, each DPA may extend the scope of the supervision to the activities of enterprises who are also active in only one Member State.

Lastly, the DVI stated that the information obtained as a result of the supervision will be analysed in a coordinated manner and the Baltic DPAs will decide on possible further supervisory measures by developing good practice recommendations for enterprises providing such and similar services to natural persons.

You can read the press release, only available in Latvian, here, and available in English here and here.