From: Priya E. Abraham [mailto:
[email protected]]
Sent: Tuesday, November 27, 2018 11:18 AM
To: Maarja Kirss <
[email protected]>
Subject: [VÄLJAST] Re: [VÄLJAST] About brief meeting
Dear Maarja,
As per our earlier messages I am now sending the short list of questions. Apologies for the
delay in sending the list. The reason is that we have circulated a brief survey among digital
nomads and entrepreneurs incorporated in Europe (many of them in Estonia) in order to
understand their level of knowledge and their concerns about privacy better. The list of
questions incorporates the outcome of the survey. It would be great to receive your answers
before the season holidays (Xmas), your resources permitting. If you require any further
details please do not hesitate to contact me.
Best regards,
Priya
QUESTIONS:
01 Required regulations and directives
Which regulations other than the GDPR are nomads and entrepreneurs incorporated in
Estonia required to following? E.g. PECR, e-Directive, the California Privacy Act? Please list
all necessary regulations and guidelines, which Estonian entrepreneurs must comply with.
02 Regulation vs. directive in Estonia
By when do you expect to have the Estonia Directive in place? Until the installation of the
document should Estonians enterprises, including digital nomads who, in their role of
Estonian e-citizens, have incorporated a business in Estonia follow the Regulation? If so, how
would you inform them about the installation of the Directive? What additional information
will be made available for them?
03 Data breach
Digital nomads, founders, and entrepreneurs, incorporated in Estonia would need to inform
people affected by a potential data breach and report the data breach to the AKI. What process
have you got in place, if any? What actions should business holders take to inform you
appropriately? What format do you require? Which communication channel do you prefer?
04 Records for processing activities
What does the AKI accept as appropriate format for the records for processing activities; e.g.
Github or Gitlab exports, Excel or Word document, or other?
05 Physical devices
In case of a lost or stolen device that holds personal data, in what format should Estonian
business holders report the incident to the AKI?
06 Unsolicited marketing emails
In case of receipt of unsolicited marketing emails where and how can Estonian business
holders report these nuisance mails? E.g. the ICO (UK) offers a registration portal for
nuisance messages.
07 Registration duty/option
Do organisations incorporated in Estonia have to register at the AKI? Is there a membership
fee? What service do you offer in return?
08 DPIA
Can entrepreneurs submit their DPIA and have the residual risk and suggested measures
evaluated by the AKI?
With best regards,
Priya E. Abraham
Dr. Priya E. Abraham, MBA
|
Digital transformation strategist | Privacy expert | Author of Cyberconnecting
[email protected]
Twitter: @cyberconnecting | Skype: PriyaEAbraham
Cyberconnecting OÜ
Sepapaja 6, 15554 Tallinn
Estonia
On 22.10.2018, at 10:33, Maarja Kirss <
[email protected]> wrote:
Hi,
Official deadline for completion is 30 days. But we usually try to do it faster.
Best regards,
Maarja Kirss
From: Priya E. Abraham [mailto:
[email protected]]
Sent: Monday, October 22, 2018 11:29 AM
To: Maarja Kirss <
[email protected]>
Subject: [VÄLJAST] Re: About brief meeting
Dear Maarja Kirss,
Many thanks for your prompt response and the kind offer to answer questions by email. I
welcome to send a list with max. 10 questions by Oct 31. How long would it take to receive a
response?
Best regards,
Priya
On 17.10.2018, at 10:17, Maarja Kirss <
[email protected]> wrote:
Dear Dr Abraham,
Thank you for the request of meeting. Unfortunately, it will be difficult to arrange a meeting
for tomorrow. I think it will be useful if you could meet our Technology Director and Data
Security expert, but they are out of office this week. Estonian Data Protection Inspectorate is
one of the smallest public agency in Estonia and the calendar of our employees is very tight.
Maybe you could send your questions by email?
With the best wishes,
Maarja Kirss
Co-operation Director
Estonian Data Protection Inspectorate
From: Priya E. Abraham [mailto:
[email protected]] Sent: Tuesday, October 16, 2018 4:50
PM To: Kaja Puusepp <
[email protected]> Subject: [VÄLJAST] Brief meeting
To whom it may concern:
I am an Estonian e-citizen, writing an ebook on cybersecurity, indemnity, privacy and compliance,
specifically tailored for digital nomads, of whom many are incorporated in Estonia. For this rapidly
growing community it would be essential to know how best to connect with the Estonian Data
Protection Inspectorate and what actions to take in case of a breach, all which, and more, would be
one section of the ebook.
Would you have time to meet with me regarding this important topic? I am in Tallinn until Thursday,
October 18 early afternoon and could come to your office, your availability provided.
Looking forward to hearing from you.
With best regards,
Priya E. Abraham
Dr. Priya E. Abraham, MBA
|
Digital transformation strategist | Privacy expert | Author of Cyberconnecting
[email protected]
Twitter: @cyberconnecting | Skype: PriyaEAbraham