Law note · Estonia
GDPR Chapter V, Cross-Border Transfer of Personal Data from Estonia
cite Regulation (EU) 2016/679, Arts. 44-50
stage In effect
since 2019-01-15
reviewed 2026-08-24
Transferring personal data of a person in Estonia outside the European Economic Area requires a European Commission adequacy decision, Standard Contractual Clauses, Binding Corporate Rules, or a narrow Article 49 derogation, backed by the Article 83(5) top fine tier. Secondary commentary reports Estonia imposes no additional derogation beyond this General Data Protection Regulation (GDPR) Chapter V baseline; not independently confirmed against the Act's own text this pass.
What it asks of an app
- Rely on a European Commission adequacy decision, Standard Contractual Clauses with a transfer impact assessment, Binding Corporate Rules, or a narrow Article 49 derogation before moving personal data of a person in Estonia outside the European Economic Area.
When LexLint raises it
Declared activities: crawls_web, trains_models, deploys_chatbot
Primary source: Official Journal text, EUR-Lex, Regulation (EU) 2016/679