Estonia. Comprehensive data protection. Act
PDPA 2007Personal Data Protection Act of 15 February 2007 (Isikuandmete kaitse seadus)
Repealed/superseded
Partly verified
Medium confidence.Adoption and entry-into-force dates are from the Estonian Human Rights Centre and a search summary of the Riigi Teataja English translation. The 2019-01-15 repeal date is taken from the in-force date of the existing 2018 Act row; the 2018 Act's repeal clause was not read.
§1Summary
- Synopsis
Estonia's general data protection act from 2008 until the GDPR era. It introduced the category of sensitive personal data in place of private personal data, which also covers biometric data. The Personal Data Protection Act of 2018 replaced it on 15 January 2019.
- Key themes
- SaaS relevance
Historical only; replaced by the Personal Data Protection Act 2018 (ee-pdpa-2019).
§2Dates
- Key dates
- Adopted
- In force
- Ended
- Passed 2007-02-15 (RT I 2007, 24, 127); in force 2008-01-01; replaced by the Personal Data Protection Act passed 2018-12-12, in force 2019-01-15
§3Text and authority
- Text
- Authoritative text riigiteataja.ee
- Authority
- Andmekaitse Inspektsioon (Estonian Data Protection Inspectorate)
§4Where it applies
- Domestic law of
- Estonia
§5Sources and verification
- Sources consulted
- Verification
Medium confidence.
Partly verified
Medium confidence.Adoption and entry-into-force dates are from the Estonian Human Rights Centre and a search summary of the Riigi Teataja English translation. The 2019-01-15 repeal date is taken from the in-force date of the existing 2018 Act row; the 2018 Act's repeal clause was not read.