Sorainen Latvian office assisted one of the pharmacy chains in Latvia in conducting a data protection impact assessment (DPIA) before developing the concept of an online pharmacy.

About the online pharmacy concept

An online pharmacy allows shoppers to purchase non-prescription medicine and other items remotely. During a pandemic, the ability to make purchases remotely is essential for both customer convenience and their security.


According to Article 35 of the General Data Protection Regulation, where, after having taken into account the nature, scope, context and purposes of a type of processing – in particular, one using new technologies – it is concluded that it is likely to result in a high risk to the rights and freedoms of natural persons, the company must before processing assess the impact of the envisaged processing operations on the protection of personal data. DPIA helps assess potential risks and potential mitigation mechanisms to ensure adequate privacy protection.

Our team

The assessment was carried out by partner Ieva Andersone and associate Anna Bogdanova.