Estonia. ePrivacy / marketing. Act
ESSElectronic Communications Act (Elektroonilise side seadus) and Information Society Services Act
In force
Partly verified
Low confidence.Not verified this session; Estonia may have replaced its ECA when transposing the EECC.
§1Summary
- Synopsis
Estonian electronic communications and information society laws implement ePrivacy cookie consent and restrictions on unsolicited electronic commercial communications.
- Key themes
- Unique features
Estonia's cookie provision has been read as less explicit than peers, with the DPA relying on GDPR consent standards.
- SaaS relevance
Any SaaS website, app or product that sets non-essential cookies/SDKs or sends marketing emails/SMS to users in this country needs prior consent (subject to exemptions) under this law, regardless of where the provider is based.
§2Obligations
- Extraterritorial
- Yes
- Breach notification
- Telecom providers: authority notification under Reg 611/2013; otherwise GDPR
- DPO
- No
- Cross-border transfers
- None
- Maximum penalty
- Misdemeanour fines; GDPR fines
§3Dates
- Key dates
- Adopted
- In force
- Cookie consent rule added in 2011 for ePrivacy 2009
§4Text and authority
- Text
- Authoritative text riigiteataja.ee
- Authority
- Andmekaitse Inspektsioon (cookies/marketing); Consumer Protection and Technical Regulatory Authority (TTJA)
§5Where it applies
- Domestic law of
- Estonia
§6Sources and verification
- Sources consulted
- Verification
Low confidence.
Partly verified
Low confidence.Not verified this session; Estonia may have replaced its ECA when transposing the EECC.