Overview
The Estonia Personal Data Protection Act (Isikuandmete kaitse seadus - IKS) is Estonia's national data protection legislation that supplements and implements the European Union General Data Protection Regulation (GDPR) and the EU Law Enforcement Directive. The Act establishes rules for the processing and protection of personal data, defines individuals' privacy rights, provides requirements for data controllers and processors, and sets out procedures for supervisory oversight and enforcement. It also includes specific provisions for areas such as journalism, scientific research, public archives, children's data, deceased persons' data, and processing by law enforcement authorities. The Act aims to safeguard the rights and freedoms of individuals while enabling the lawful and transparent use of personal data across public and private sectors.