Estonia
| OVERVIEW | Estonian data protection norms derive from a variety of legal sources, such as the constitution, international agreements, European Union laws, ordinary legislation, and regulations and/or advisory opinions by the Estonian Data Protection Inspectorate. |
| ENACTED | 2003 |
| GENERAL PRIVACY LAWS |
The Estonian Constitution recognizes the right of privacy, the right to privately exchange information and the right of data protection. Article 43 states that each person has a right for secrecy concerning messages transmitted to him via post, telegraph, telephone or other means generally in use. |
| PERSONAL DATA PROTECTION LAWS AND REGULATIONS |
Personal Data Protection Act of 2003 (English Translation). Estonia Data Bases Act primarily regulates the establishment of national databases, but does have some provisions related to the rights of individuals. |
| TYPE OF DATA PROTECTED | Personal data. |
| WORKPLACE PRIVACY LAWS | In Estonia, no specific regulations exist for the protection of privacy or private life at the workplace. Privacy at the workplace falls under the same regulations as general privacy rights do. |
| TRANSBORDER TRANSFERS |
The Data Protection Act contains restrictions on the transfer of personal data to third countries outside of the European Economic Area (EEA). Personal data can be transferred to another country only if that country ensures the level of data protection that corresponds to the level of data protection in Estonia. Chapter 6, § 28 of the Data Protection Act complies with the requirements of the EU Data Protection Directive. |
| FINES AND SANCTIONS | Civil fines. |
| OTHER PRIVACY LAWS AND REGULATIONS |
Estonia Databases Act primarily regulates the establishment of national databases, but does have some provisions related to the rights of individuals. Estonia Public Information Act Surveillance Act of 1994 establishes the procedures for the government’s conduct of surveillance. Although it deals primarily with the public/government sector, it’s approach is focused primarily on the procedural aspects, rather than the establishment of individuals right of privacy. Electronic Communications Act 2004 Human Genes Research Act that regulates the use of genetic information in connection with the Gene Bank established by the country. |
