22 SEP 2023 · Other

Monitoring of Short-Term Rental Service Providers of Motor Vehicles

On 22 September 2023, the Estonian Data Protection Inspectorate published the results of the Monitoring of Short-Term Rental Service Providers of Motor Vehicles. The inquiry aimed to evaluate how these providers handled personal data and identified several issues. Firstly, these providers often incorrectly cited reasons for processing personal data, such as contract performance or pre-contract measures, even when such justifications were unnecessary. This led to a lack of clarity regarding th...

Secondary evidenceNational StrategyIssuing institution: Issuing authority not identified

11 APR 2022 · Executive Order

Ban of Yandex in Estonia

On 11 April 2022, the sanctions on Yandex issued by the Estonian Government on 31 March 2022 come into effect. The government issued the sanction in response to the Russian Government's order to companies to share personal data collected with the authorities. Prime Minister Kaja Kallas noted that individuals using the application Yandex must provide access to a considerable amount of personal data, which is processed by the company on the servers located in Russia. To prevent the collection a...

Secondary evidenceNational StrategyIssuing institution: Issuing authority not identified

15 MAR 2022 · Law / Act

Data protection regulation in Law amending the Money Laundering and Terrorist Financing Prevention Act and other laws

On 15 March 2022, the Law amending the Money Laundering and Terrorist Financing Prevention Act and other laws entered into force. The Law affects inter alia crypto transfer providers, crypto exchanges, and crypto wallets. The affected businesses are now subject to the Travel Rule, which requires that identifying data on the transaction needs to be collected and shared with the service provider of the individual or entity receiving the transaction. The data to be collected includes full name, ...

Secondary evidenceNational StrategyIssuing institution: Issuing authority not identified

11 MAR 2022 · Working Paper

Cyber risk assessment for Estonia in light of the conflict in Ukraine

On 11 March 2022, the Information System Authority of Estonia published a second risk assessment and recommendations on cybersecurity following Ukraine's military invasion by Russia. The assessment concludes that the threat for Estonia is limited but recommends to implement vigilant cyber security practices in view of geopolitical tensions.

Secondary evidenceNational StrategyIssuing institution: Issuing authority not identified

27 FEB 2022 · Other

Letter to tech companies by prime ministers of Estonia, Latvia, Lithuania and Poland

On 27 February 2022, the Prime Ministers of Estonia, Latvia, Lithuania, and Poland sent a letter to Twitter, Google, YouTube, and Meta, demanding the companies to implement new measures to address misinformation regarding Russia’s war of aggression against Ukraine. The Prime Ministers asked the companies to suspend and demonetize the accounts of the Russian and Belarusian governments and to change their algorithm to provide users with “reliable information” regarding the war in Ukraine.

Secondary evidenceContent ModerationIssuing institution: Issuing authority not identified

20 DEC 2021 · Law / Act

Estonian implementation of EU DSM Copyright directive, including copyright exceptions

The Copyright Act amending the law for the implementation of the EU DSM Directive was signed by the Estonian president on 20 december 2021. The reformed Directive includes several exceptions from copyright protection. Firstly, it provides for an exception to the requirement for rightholders' prior authorisation for content used for text and data mining (i.e. data analytics and artificial intelligence development), unless stated otherwise in an appropriate manner by the author. Furthermore, it...

Secondary evidenceContent ModerationIssuing institution: Issuing authority not identified