The Estonian Data Protection Inspectorate (AKI) has issued instructions following a data breach at the company Innovaatik OÜ.

The authority has informed the relevant data controllers, such as dental clinics, that they do not need to submit a separate breach notification for this incident. However, each data controller must assess the impact of the breach on the personal data they process, document it internally, and determine any additional measures to implement. Depending on the results of this assessment, informing patients or other relevant actions may be necessary. AKI recommends that affected individuals first contact their data controller, such as their clinic, or reach out to Innovaatik OÜ.