Police queries of Estonians' health data increased 16-fold in two years

Police investigators have requested health data through TEHIK more than 16 times more frequently this year than a couple of years ago. Additionally, police have direct access through the X-Road to the health insurance fund's database and the prescription centre. The data growth raises questions about privacy and the scope of state oversight.

Estonian police investigators' queries into citizens' health data have surged dramatically — this year, requests for information submitted through the Health and Welfare Information Systems Centre (TEHIK) are more than 16 times higher than a couple of years ago. Additionally, police have direct access through the X-Road to both the health insurance fund's database and the prescription centre.

The growth raises serious questions about the protection of personal data and the scope of state oversight. Health data is among the most sensitive personal information — it reflects people's diagnoses, medication use, and health status, which is why its accessibility to law enforcement authorities is a particularly delicate matter.

One of the strengths of Estonia's digital society has been the protection and transparency of personal data: everyone can check for themselves who has accessed their information. However, against the backdrop of this sharp increase, the question arises whether the existing safeguards and oversight mechanisms are sufficient to ensure that data queries are justified and proportionate.

The growth in data queries may be linked to changes in police procedures, the adoption of new digital investigative capabilities, or an overall increase in the volume of criminal proceedings. Regardless of the reasons, such a dramatic surge demands explanation and accountability to the Data Protection Inspectorate, the Riigikogu, and the public.