Footnotes

[1042] The Human Rights Report submitted to the United States Congress by the United States Department of State, Section 1f, http://www.ncbuy.com/reference/country/humanrights.html?code=en&sec=1f.

[1043] Constitution of Estonia, available at http://www.uni-wuerzburg.de/law/en00t___.html.

[1044] Law on the protection of personal data (RT I 1996, 48, 944), available at http://www.dp.gov.ee/eng/Personal_Data_Protection_Act.html.

[1045] Based on the definition in the 2003 version of the Personal Data Protection Act, "chief processors" are equivalent to "controllers" as it is defined by Art. 2 (d) of the European Union Data Protection Directive (1995/46/EC). The Estonian term "authorized processor" is the equivalent of the term "processor" as it is defined by Art. 2 (e) of the EU Directive 1995/46/EC.

[1046] E-mail from Triinu Jaaksoo, Public Relations Officer, Estonian Data Protection Inspectorate to Cédric Laurant, Policy Counsel, Electronic Privacy Information Center (EPIC), July 4, 2003 (on file with EPIC).

[1047] Databases Act (RT* I 1997, 28, 423), available at http://www.dp.gov.ee/eng/Databases_Act.html.

[1048] RT I 2003, 26, 158 (State Gazette); http://www.legaltext.ee/en/andmebaas/ava.asp?tyyp=SITE_ALL&ptyyp=I&m=000&query=data+protection&nups.x=38&nups.y=12

[1049] E-mail from Triinu Jaaksoo, supra.

[1050] RT I 2002, 63, 387, http://www.legaltext.ee/en/andmebaas/ava.asp?tyyp=SITE_ALL&ptyyp=I&m=000&query=databases&nups.x=45&nups.y=8

[1051] Homepage http://www.dp.gov.ee.

[1052] E-mail from Triinu Jaaksoo, supra.

[1053] 2002 data in the e-mail from Triinu Jaaksoo, supra. In 2001, the DPI received a total of 103 complaints under the PDPA and the Public Information Act. It issued fifty-seven orders and referred eight cases of criminal violations to relevant authorities. It received eighty-eight registration applications for processing of sensitive data. As of July 2002, there were seventeen staff members, up from eight in 1999. E-mail from Erki Podra, supra.

[1054] E-mail from Karel Neuwirt, President, Office for Personal Data Protection, Czech Republic, to Sarah Andrews, Research Director, EPIC, May 15, 2002 (on file with EPIC).

[1055] http://cmgm.stanford.edu/biochem118/Papers/Genome%20Papers/Estonian%20Genome%20Res%20Act.pdf.

[1056] http://www.geenivaramu.ee.

[1057] "Estonian Genome Foundation Signs Pilot Project Financing Accords," Baltic News Service, January 2, 2002.

[1058] http://www.genomics.ee/index.php?lang=eng&nid=125.

[1059] http://www.geenivaramu.ee/index.php?lang=eng&sub=74.

[1060] Regulation No. 370 of December 4, 2001 on the Establishment of Format and Technical Description of Identity Card and List of Data Entered on Identity Card and Determination of Period of Validity of Digital Data Entered on Identity Card.

[1061] http://www.pass.ee/63.html.

[1062] Digital Signatures Act, (RT I 2000, 26, 150), passed March 8, 2000, entered into force December 15, 2000. http://www.riik.ee/riso/digiallkiri/digsignact.rtf.

[1063] "European States Roll out EID Cards," Cards International, February 22, 2002.

[1064] "Estonian ID-Card Security Envelopes Shine Through," Baltic News Service, May 3, 2002.

[1065] "Estonian Government Advises Parliament Not To Pass Income Tax Publication Bill," Baltic News Service, October 3, 2000.

[1066] Surveillance Act (RT* I 1994, 16, 290, February 22, 1994), available at http://vlf.juridicum.su.se/master99/library2/teste/Surv.htm.

[1067] Criminal Code Art. 134.

[1068] Surveillance Act (RT* I 1994, 16, 290, February 22, 1994) http://vlf.juridicum.su.se/master99/library2/teste/Surv.htm.

[1069] Baltic News Service, October 8, 1999.

[1070] "Estonian government approves plans for tax police," BBC Worldwide Monitoring, May 16, 2000.

[1071] Telecommunications Act passed February 9, 2000 (RT I 2000, 18, 116), entered into force March 19, 2000. http://www.legaltext.ee/tekstid/X/en/X30063.HTM.

[1072] "Estonian intelligence begins probe into former premier Saavisar," Deutsche Presse-Agentur, May 16, 1996.

[1073] "Estonian MP rejects reports that Estonian secret services spied on Swedes," BBC Worldwide Monitoring, January 13, 2000.

[1074] "Estonian Security Police is not Involved in Politics," Baltic News Service, March 14, 2002.

[1075] IT in Public Administration of Estonia, Yearbook 2002, Section 1.4, http://www.ria.ee/english/2002/p14_t.htm

[1076] Signed May 14, 1993; ratified April 16, 1996; entered into force April 16, 1996.

[1077] Signed January 24, 2000; ratified November 14, 2001; entered into force March 01, 2002.

[1078] Signed November 23, 2001.