Andmekaitsemäärus

Andmekaitsemäärus refers to a legal regulation concerning data protection. In Estonia, this term is often used synonymously with the General Data Protection Regulation (GDPR), which is a European Union law that governs data privacy and data protection for all individuals within the European Union and the European Economic Area. The GDPR aims to give individuals control over their personal data and to unify data privacy regulations across Europe.

The Andmekaitsemäärus imposes strict obligations on organizations that process personal data. These obligations include obtaining explicit consent for data collection, ensuring data accuracy and security, and allowing individuals to access, rectify, or erase their data. It also outlines procedures for data breach notifications and establishes the rights of data subjects. The regulation applies to both private and public sector entities.

Enforcement of the Andmekaitsemäärus is carried out by national data protection authorities. In Estonia, this role is fulfilled by the Data Protection Inspectorate (Andmekaitse Inspektsioon). Organizations in breach of the regulation can face significant fines. The Andmekaitsemäärus is a crucial piece of legislation for safeguarding personal information in the digital age and fostering trust in how data is handled.