Andmekogusse

Andmekogusse is a term used in Estonia to describe a form of data protection legislation that focuses on the collection, storage, and transfer of personal data. The concept of andmekogusse is rooted in the country's Data Protection Act, which went into effect in 2003 and has undergone several amendments over the years.

Under the andmekogusse framework, personal data is only collected, stored, and transferred when strictly necessary for a specific purpose. This is known as the principle of minimality. Data controllers in Estonia are required to inform individuals whose data they collect about the purpose of the data processing, who the personal data will be shared with, and the individual's rights in relation to their personal data.

Organizations that process personal data in Estonia must adhere to the principles of andmekogusse, which includes transparency, accountability, and security. This includes measures to protect personal data against unauthorized access, disclosure, alteration, or destruction, as well as ensuring that data subjects are fully informed and have the right to access, rectify, erasure, and objection to the processing of their personal data.

Overall, andmekogusse serves as a framework for data protection in Estonia, emphasizing the protection of personal data rights while facilitating the free flow of information. This concept is often compared to the European Union's General Data Protection Regulation (GDPR), which shares similar principles and goals in terms of protecting the personal data of individuals within the European Economic Area.