Content type · 11 documents

Enforcement

Regulatory actions, fines, warnings, and enforcement decisions

🇪🇺 EU 🇳🇱 NL
Enforcement dashboard — fines by country, authority and article →
Country: Estonia (11) Clear filter
Filter by Topic Supervisory Authorities3518 Processing Agreement2798 Processing2594 Personal Data2548 Controllers2165 Data Controller1854 Law Enforcement1541 IP Address1278 Security1007 Supervision854 Monitoring523 Consent498
Estonia · €1,000 AKI (Estonia) - No. 2.1-1/24/397-890-38 Facts — OÜ Dr Mõttus Hambaravi, the controller, is a Dental Clinic. On March 2024, the DPA received a complaint from a data subject regarding the fact that the controller had… Controllers Processors Data Controller Apr 16, 2026
AKI · €3,000,000 Allium UPI: Onvoldoende technische en organisatorische maatregelen om de informatiebeveiliging te waarborgen. Een boete van 3.000.000 euro - De Estische Autoriteit voor Gegevensbescherming (AKI). Security Data Breaches Minors NL Sep 5, 2025
AKI · €3,000,000 Allium UPI: Insufficient technical and organisational measures to ensure information security The Estonian DPA has imposed a fine of EUR 3,000,000 on Allium UPI. The controller failed to implement adequate technical and organisational measures to ensure data security. This… Data Breaches Security Controllers Sep 5, 2025
AKI · €0 Asper Biogene OÜ: Insufficient technical and organisational measures to ensure information security The Estonian DPA imposed a fine of EUR 85,000 on Asper Biogene OÜ. Asper Biogene OÜ suffered a data leak due to a lack of adequate security measures. The leak affected… Notified Body Responsibilities and Operational Obligations Genetic Data Security Jan 10, 2025
AKI · €30,000 Pere Sihtkapital SA: Insufficient technical and organisational measures to ensure information security The Estonian DPA imposed a fine of EUR 30,000 on Pere Sihtkapital SA. The controller conducted a survey on childless families. In the process, the controller failed to take all… Security Controllers Privacy by Design & Default Jul 15, 2024
AKI · €100,000 Apotheka e-apteek: Insufficient legal basis for data processing The Estonian DPA (Andmekaitse Inspektsioon) fined three online pharmacies EUR 100,000 each for processing personal data without the consent of the data subjects. The data in… Healthcare Consent IP Address Dec 1, 2020
AKI · €100,000 Azeta.ee e-apteek: Insufficient legal basis for data processing The Estonian DPA (Andmekaitse Inspektsioon) fined three online pharmacies EUR 100,000 each for processing personal data without the consent of the data subjects. The data in… Healthcare Consent IP Address Dec 1, 2020
AKI · €100,000 Südameapteegi e-apteek: Insufficient legal basis for data processing The Estonian DPA (Andmekaitse Inspektsioon) fined three online pharmacies EUR 100,000 each for processing personal data without the consent of the data subjects. The data in… Healthcare Consent IP Address Dec 1, 2020
AKI · €48 Police Officer: Insufficient legal basis for data processing Acess to personal data in a police database for private research activities. Scientific Research Personal Data Processing Aug 17, 2020
AKI · €56 Health care worker: Insufficient legal basis for data processing Acess to personal data in a health database for private research activities. Scientific Research Health Data Personal Data Aug 17, 2020
AKI · €500 Housing Association: Insufficient legal basis for data processing Fine of EUR 500 against a housing association for publishing photos showing members of the association without their consent. Consent Processing Supervisory Authorities Apr 30, 2020