The Estonian Data Protection Inspectorate (AKI) has initiated a control procedure concerning the health information system (TIS).

This procedure aims to verify compliance with the requirements relating to the protection of personal data and the management of the database within this state system, which centralizes data transmitted by healthcare providers. The control will focus in particular on the methods of transmission and communication of data, access management, logging of operations performed, as well as on the information provided to individuals regarding the processing of their data. The investigation concerns the activities of the Ministry of Social Affairs, as joint controller, and the Health and Welfare Information Systems Centre (TEHIK), as processor. The results of this large-scale supervision are expected next year.