Andmekaitsega

Andmekaitsega is an Estonian term tied to data protection and privacy. In practical use it denotes the set of practices, policies, and technologies aimed at safeguarding personal data from unauthorized access, use, or disclosure throughout its collection, storage, processing, and transfer.

Core principles associated with andmekaitse include lawfulness, fairness and transparency; purpose limitation; data minimization; accuracy; storage limitation; integrity and confidentiality; and accountability. Data subjects have rights such as access, correction, deletion, restriction of processing, objection, and data portability. In processing activities, roles are defined for the data controller and the data processor, each bearing specific responsibilities under applicable laws.

Legal framework: Data protection in the European Union is governed primarily by the General Data Protection Regulation (GDPR). In Estonia, national legislation such as the Isikuandmete kaitse seadus complements GDPR by detailing national rules and enforcement. Organizations pursuing andmekaitse typically conduct data protection impact assessments, maintain records of processing activities, implement privacy by design and by default, and ensure appropriate technical and organizational measures.

Practical measures often include data encryption, access controls, audit logging, pseudonymization, secure data transfer, and regular staff training. Data protection is supported by Estonia’s digital infrastructure, including identity and access management and secure data exchange systems such as X-Road. See also: GDPR, privacy by design, Isikuandmete kaitse seadus, data subject rights.