Status regarding Budapest Convention
Status : Party Declarations and reservations : declarations regarding Articles 24, 27 and 35; no reservations. See legal profileCybercrime policies/strategies
The Cybersecurity strategy 2019-2022 builds on the two previous strategy periods (2008-2013 and 2014 – 2017), Estonia being one of the first states that recognised the interdisciplinary nature of cybersecurity and the having thus developed one of the first horizontal cybersecurity strategies in the world. The current strategy focuses on 4 strategic objectives:
Obj. 1 A sustainable digital society.
Obj. 2 Cybersecurity industry, research and development
Obj. 3 A leading international contributor
Obj. 4 A cyber-literate society
(Source: Ministry of Economic Affairs and Communications Cyber security portal)
Policies and strategies of Estonia can be further found here:
Estonian Guidelines for Development of Criminal Policy until 2018 (in Estonian)
Cybercrime legislation
State of cybercrime legislation
Cybercrime legislation has been enacted through measures foreseen in the Penal Code in terms of substantive law and in the Criminal Procedure Code in terms of procedural law and international cooperation.
Both substantive and procedural criminal law framework of Estonia are fully in line with the Convention requirements.
Substantive law
The Penal Code includes the following offences:
- § 217. Illegal obtaining of access to computer systems
- § 137. Unauthorised surveillance
- § 206. Interference with computer data
- § 207. Hindering of functioning of computer systems
- § 2161. Preparation of computer-related crime
- § 213. Computer-related fraud
- § 344. Counterfeiting of documents, seals or blank document forms
- § 213. Computer-related fraud
- § 1751. Requesting access to child pornography and watching thereof
- § 178. Manufacture of works involving child pornography or making child pornography available
- § 2221. Infringement of copyright in computer system
Procedural law
The Criminal Procedure Code among others includes the following investigative measures:
- § 215. Obligation to comply with orders and demands of investigative bodies and prosecutors’ offices
- § 901. Request to electronic communications undertakings to submit information
- § 91. Search
- § 1263. Surveillance activities
- § 1265. Covert surveillance, covert collection of comparative samples and conduct of initial examinations, covert examination and replacement of things
- § 1267. Wire-tapping or covert observation of information
Some relevant provisions are included in the Electronic Communications Act:
- ECA § 1111. Obligation to preserve data
- ECA § 112. Obligation to provide information
Safeguards
Horizontally applicable safeguards as foreseen by the Constitution of Estonia and the Criminal Procedure Code.
Related laws and regulations
Specialised institutions
International cooperation
Competent authorities and channels
International cooperation is ensured through Estonia being a member of the UN, CoE as well as through EU conventions and bilateral agreements
Competent authorities and channels
Authority for extradition and provisional arrest in the absence of other treaties (Article 24)
Ministry of Justice
Tõnismägi 5A, Tallinn 15191, Republic of Estonia
+372 620 81 90/+372 620 81 91
www.just.ee
Authority for Mutual Legal Assistance in the absence of other agreements or arrangements (Article 27)
Ministry of Justice
Tõnismägi 5A, Tallinn 15191, Republic of Estonia
+372 620 81 90/+372 620 81 91
www.just.ee
24/7 Contact point (Article 35)
Estonian Police and Border Guard Board
Intelligence Management and Investigation Department
Law Enforcement Intelligence Management Bureau (SPOC)
Tööstuse 52, 10419 Tallinn, ESTONIA
Prosecutor’s Office
Sources and links (Practical guides, templates and best practices)
Practical guides, templates and best practices
Jurisprudence/case law
Sources and links
Ministry of Economic Affairs and Communications Cyber security portal
Other GENVAL 7th round evaluation reports
Police and Border Guard Board (24/7 contact point)
Estonian National Computer Emergency Response Team (CERT-EE)