On August 20, 2026, the Latvian Ministry of Defense announced draft amendments to the National Cybersecurity Law that would legalize the activities of 'white-hat' hackers—security researchers who identify vulnerabilities in information systems without malicious intent. The proposal aims to encourage proactive vulnerability discovery and reporting, aligning with practices in other EU countries.
The amendments would provide a legal framework for security researchers to test systems with the owner's consent, protecting them from prosecution under computer crime laws. The ministry emphasized that the changes are designed to strengthen national cybersecurity by leveraging the skills of the broader security community.
According to the ministry, the draft is currently in the public consultation phase, with stakeholders invited to submit feedback. The final text will be submitted to the Saeima (Latvian parliament) for consideration later this year. The ministry did not specify a timeline for adoption.
This move reflects a growing trend in Europe to formalize coordinated vulnerability disclosure and protect ethical hackers, as seen in recent EU directives on cybersecurity. If passed, Latvia would join several other nations that have explicit legal protections for good-faith security research.
