Andmekaitse Inspektsioon
Data protection authority of Estonia
Total Actions
28
Total Fines
€3.3M
Average Fine
€416K
Among actions with fines
Enforcement Factor
1.10
Measured
About Andmekaitse Inspektsioon
The Andmekaitse Inspektsioon is Estonia's data protection authority responsible for enforcing GDPR and data-protection compliance. Andmekaitse Inspektsioon has taken 28 enforcement actions resulting in €3,330,604 in total penalties, with an average fine of €416K per sanctioned entity. The authority maintains a balanced enforcement approach (enforcement factor: 1.1), combining deterrent fines with corrective orders. Its most significant action was a €3,000,000 fine against Allium UPI in 2025. The most frequently cited legal basis in Andmekaitse Inspektsioon's decisions is Art. 5(GDPR) and Art. 6(GDPR).
Largest Fines by Andmekaitse Inspektsioon
View all actionsRecent Actions by Andmekaitse Inspektsioon
View all actionsEnforcement by Year
| Year | Actions | Total Fines |
|---|---|---|
| 2019 | 1 | €0 |
| 2020 | 8 | €301K |
| 2022 | 2 | €0 |
| 2023 | 1 | €0 |
| 2024 | 3 | €30K |
| 2025 | 11 | €3.0M |
| 2026 | 2 | €0 |
Most Cited GDPR Articles
Frequently Asked Questions
How many GDPR and data-protection actions has Andmekaitse Inspektsioon issued?
Andmekaitse Inspektsioon has issued 28 enforcement actions related to GDPR and data-protection, totaling €3.3M.
What is Andmekaitse Inspektsioon's largest GDPR and data-protection fine?
The largest was a €3.0M fine against Allium UPI on 2025-09-05.