Andmekogumiku

Andmekogumiku, also known as the Estonian Data Protection Authority, is the independent regulatory body responsible for overseeing data protection and privacy matters in Estonia. Established in 2001, it operates under the authority of the Data Protection Act, aligning with the broader framework of the European Union’s General Data Protection Regulation (GDPR) since its implementation in 2018. The agency ensures compliance with national and international data protection laws, safeguarding individuals' personal data and promoting transparency in data processing practices.

The primary functions of Andmekogumiku include supervising data controllers and processors, investigating complaints from data subjects, and conducting inspections to assess adherence to data protection regulations. It also provides guidance and educational resources to organizations and the public, fostering awareness of privacy rights and best practices. The authority collaborates with other EU data protection authorities through the European Data Protection Board (EDPB) to harmonize enforcement and policy development across member states.

Andmekogumiku plays a key role in Estonia’s digital society, particularly in sectors like e-governance and e-residency, where data privacy is critical. It enforces penalties for non-compliance, ranging from warnings to fines, and may initiate legal proceedings in severe cases. The organization is headquartered in Tallinn and operates with a multidisciplinary team of legal, technical, and administrative experts to address evolving challenges in data protection.

For individuals, Andmekogumiku serves as a point of contact for exercising rights such as access, rectification, and erasure of personal data. Businesses and public institutions must register with the authority and demonstrate compliance with data protection obligations. The agency’s work contributes to Estonia’s reputation as a leader in digital innovation while maintaining robust privacy safeguards.