Andmepöördumise

Andmepöördumise is an Estonian term that translates to "data request" or "information request." It refers to the formal process of seeking access to personal data held by an organization or institution. This right is often enshrined in data protection laws, such as the General Data Protection Regulation (GDPR) in the European Union, which Estonia is a part of.

Individuals can submit an andmepöördumise to inquire about what personal data is being collected about them, how it is being used, and who it is being shared with. They can also request a copy of their data, ask for inaccuracies to be corrected, or in some cases, request that their data be deleted. The process typically involves submitting a written request, often through a designated form or email address provided by the data controller.

Organizations are generally required to respond to andmepöördumised within a specific timeframe, usually one month, though extensions are possible under certain circumstances. They must provide the requested information or explain why access cannot be granted. This mechanism is a cornerstone of data privacy, empowering individuals to exercise control over their personal information. The concept emphasizes transparency and accountability in data processing activities.