Estonia Personal Data Protection Act (Isikuandmete kaitse seadus, 2019): every control, and what you already have

25 controls 100 frameworks share controls with it Estonia verified against its source document

Every control below is one this framework asks for. The right hand column counts how many other frameworks in our corpus carry the same control, which is the difference between doing this work once and doing it again for the next standard.

Barbados Data Protection Act 2019 Evidence & Implementation Kit

25 controls is the documentation set somebody has to write. This is that set, already written: an adopt-ready artifact for every control in policy and procedure text you edit rather than draft, and the evidence checklist an auditor asks for against each.

See what is in it, $249

The same set every buyer of this kit receives. Nothing here is produced on request.

What you already have

Frameworks whose controls overlap this one, most first. If you run any of them, the count is roughly what you have already evidenced.

If you run	Shared controls
GDPR	8	measure it →
AICPA Privacy Management Framework (PMF)	1	measure it →
Albania Law on Protection of Personal Data (Law No. 9887, 2008, amended 2014)	1	measure it →
APPI	1	measure it →
Armenia Law on Protection of Personal Data (2015)	1	measure it →
Australian Privacy Principles (APPs)	1	measure it →
Austria Data Protection Act (Datenschutzgesetz, DSG, amended 2018)	1	measure it →
Azerbaijan Law on Personal Data (2010)	1	measure it →
Azure Security Benchmark	1	measure it →
Bahrain PDPL	1	measure it →
Barbados Data Protection Act 2019	1	measure it →
Connecticut Data Privacy Act (CTDPA)	1	measure it →

Every control

Code	Control	Also in
`EPDPA-1`	Scope of Regulation (§1)	102
`EPDPA-2`	Specifications for Application (§2)	0
`EPDPA-3`	Application of Administrative Procedure Act (§3)	0
`EST-IKS-§1`	Scope of regulation of the Act	0
`EST-IKS-§10`	Processing of personal data in connection with violation of an obligation	0
`EST-IKS-§11`	Processing of personal data in public places (CCTV)	0
`EST-IKS-§12-13`	Application of the Law Enforcement chapter and terms	0
`EST-IKS-§14-21`	Principles of processing by law enforcement authorities	1
`EST-IKS-§2`	Specifications for application of the Act and Regulation (EU) 2016/679	1
`EST-IKS-§22-28`	Rights of data subjects in law enforcement processing	1
`EST-IKS-§29-39`	Obligations of controllers and processors in law enforcement processing	0
`EST-IKS-§3`	Application of the Administrative Procedure Act	0
`EST-IKS-§4`	Processing for journalistic purposes (GDPR Art.85 derogation)	0
`EST-IKS-§40-42`	Data Protection Specialist for law enforcement processing	0
`EST-IKS-§43-45`	Security measures and breach notification in law enforcement processing	1
`EST-IKS-§46-50`	Transmission of personal data to third countries and international organisations	1
`EST-IKS-§5`	Processing for academic, artistic and literary expression	0
`EST-IKS-§51-55`	Formation of the Estonian Data Protection Inspectorate and Head appointment	0
`EST-IKS-§56-61`	Exercise of state and administrative supervision by the Inspectorate	0
`EST-IKS-§6`	Processing for scientific and historical research and official statistics	1
`EST-IKS-§62-73`	Violations, proceedings and penalties	0
`EST-IKS-§7`	Processing for archiving in the public interest	0
`EST-IKS-§74-76`	Register, repeal and entry into force	0
`EST-IKS-§8`	Processing of children's personal data for information society services	1
`EST-IKS-§9`	Processing of personal data after death of the data subject	0

Tell me when Estonia Personal Data Protection Act (Isikuandmete kaitse seadus, 2019) files something new

One email when a public company newly discloses something this framework governs, naming the company and what our corpus says it puts in scope. Nothing else, and one click to stop.

What an auditor will ask you to produce

The artefacts named on the failure modes this framework speaks to.

Annual review
Supplier inventory + classification
Risk assessments per supplier
Contractual cyber clauses
ENISA coordinated risk assessment alignment
DORA TPRM cross-walk
Scope statement
Privacy risk assessment
Definitions glossary
Reference catalog

How programmes fail on this

Failure modes named by this framework and others. Each opens the full record.

No inventory named by 8 frameworks
Scope ambiguous named by 5 frameworks
no regulator engagement named by 3 frameworks
Boundaries unclear named by 3 frameworks

What this page is

A control-level reference for Estonia Personal Data Protection Act (Isikuandmete kaitse seadus, 2019), drawn from our framework corpus. Control codes and titles are references to the standard, not reproductions of it. The overlap counts and the auditor artefacts are our own work and are the part you will not find elsewhere.

Measure this against what you already run · All frameworks · Today's edition