🇪🇪Estonia

Estonia overview

Estonia has a national GDPR overlay

The GDPR applies directly, but it leaves Member States choices in areas such as children, employment, sensitive data, research, freedom of expression, public-sector processing and supervisory procedure. Estonia uses its national law to exercise those choices.

National law

EE-PDPA-2018: Personal Data Protection Act

What to assess

Start with the GDPR baseline, then assess the national provisions concerning age-13 consent, expression, research, deceased-person data, debt data and public-place recording. Apply sector legislation and regulator measures where the national law refers to them.

Compliance method

Use the country-specific law page and controls as a delta layer. Retain the current official text, an applicability decision and evidence for every national rule implemented.