Ombudsman challenges Estonia in court over mass retention of telecommunications data

Ombudsman Silver Reinsaar has filed a lawsuit with Tallinn Administrative Court arguing that Estonia violates fundamental rights by requiring telecommunications companies to retain traffic and location data on all users. The case presents an example of how such a database would make surveillance trivial in case of occupation.

Proceedings have begun in Tallinn Administrative Court in which ombudsman Silver Reinsaar challenges Estonia's requirement to impose on telecommunications companies the duty to retain traffic and location data on all users. According to Reinsaar, this constitutes a far-reaching violation of fundamental rights affecting every Estonian resident.

Mass retention under scrutiny on fundamental rights grounds

The core argument of the lawsuit is that the state is collecting information proactively about the movement and communication of millions of people without any criminal offence having been committed. In Reinsaar's view, such an approach conflicts with both the Estonian Constitution and EU law, which protect the right to privacy and data protection.

In recent years, the European Court of Justice has repeatedly stated that indiscriminate and general mass retention of telecommunications data is incompatible with the EU Charter of Fundamental Rights. Nevertheless, many member states, including Estonia, have continued to impose similar obligations on telecommunications operators.

Hypothetical occupation scenario

Reinsaar's representative presented a striking example in court: if Estonia were ever to be occupied, foreign powers would no longer need neighbours to inform on people to send them to Siberia-all necessary data on movements and contacts would already be in existence and systematised.

This argument underscores that the issue is not merely about the conduct of a trustworthy democratic state today, but also about the risks posed by such a database in a longer-term perspective.

What the case means

The acceptance of the lawsuit by Tallinn Administrative Court means that the Estonian state must defend the legality of its telecommunications data retention requirements in court. If the court rules in Reinsaar's favour, it could force the legislature to rewrite the existing rules, with direct consequences for both law enforcement investigative capability and citizens' privacy.