Estonia Personal Data Protection Act (Isikuandmete kaitse seadus, 2019)

Estonia's national Personal Data Protection Act (Isikuandmete kaitse seadus, RT I, 04.01.2019, 11, in force from 15 January 2019). The Act applies in conjunction with the GDPR: Chapter 2 implements the GDPR Article 85-89 derogations for journalistic, academic, scientific/historical research and archiving purposes; Chapter 3 covers national specifications including the child's age of consent (set at 13), processing after death of the data subject, processing in connection with violations of obligations, and processing in public places; Chapter 4 implements Directive (EU) 2016/680 (Law Enforcement Directive) for processing by law enforcement authorities, including processing principles, data subject rights, controller/processor obligations, the data protection specialist, security measures, breach notification, and transmission to third countries; Chapter 5 establishes the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon) and its competence; Chapters 6-7 set liability, penalties and implementing provisions..