Why data breaches in state institutions are eroding trust in Latvia's digital government
Following several cyber incidents at Latvian state institutions, experts warn that repeated data breaches threaten public trust in the digital state. OECD data shows trust in Latvia's government is already low and continuing to decline.
Recent cyber incidents at state institutions, including forestry company Latvijas valsts meži and the Road Traffic Safety Directorate (CSDD), have revived memories of the large-scale personal data leak from most Latvian municipalities in October 2024. In an opinion piece published by Delfi, author Ilze Rassa argues that repeated incidents raise a serious question: can residents still trust the state to safeguard their data?
Latvia's digital profile and fragile trust
According to 2023 OECD data, Latvia has a relatively strong digital governance profile, scoring above the OECD average on digital access, transparency and openness, and having implemented all six OECD-defined components of digital public infrastructure. However, the author stresses that a digital state's standing rests not merely on convenient platforms but on public trust in them — while residents often have no real choice but to hand over their data, for example when accessing healthcare or education.
Declining trust indicators
OECD's 2025 survey data shows only 27% of Latvian residents express high or moderately high trust in the national government, down from 29% in 2023. Trust in parliament, political parties and the civil service has also fallen. A 2026 OECD document notes that only a portion of people across OECD countries believe government institutions use their data solely for legitimate purposes. Latvia is also among countries where more than 40% of residents express low confidence in the government's ability to responsibly use artificial intelligence in the public sector.
Academic research on the effects of cyberattacks
Researchers Ryan Shandler and Miguel Alberto Gomez concluded in a 2022 study that the lasting damage from cyberattacks is a decline in public trust toward government, even when incidents cause no direct physical harm. Such incidents generate feelings of insecurity and fear that similar breaches could recur with other sensitive data.
Recommended response
The author calls for an independent audit not only of the affected organization but of similar systems more broadly, evaluating access rights, incident readiness and management accountability. She also argues for open, action-oriented communication with concrete deadlines and regular progress reporting, along with visible accountability at the highest levels of leadership.
