Data consent service

The data consent service is an e-service developed by the Information System Authority which allows a person to give permission to the state to share their personal data with a certain service provider.

With the data consent service, you can allow the transfer of your personal data to companies that offer innovative and personalised services based on personal data. Consents can only be given for the transfer of the data set required for a specific service. After consent has been given, the data held by the state is transferred to the private company that obtained the consent.

By using the data consent service, you can decide on the processing of your personal data by choosing third parties who can access your data. The use of the data consent service and the giving of consents is always voluntary. Consents can be revoked at any time.

The development of the data consent service started in July 2020. The first database joined the service at the end of 2021 as part of a pilot project. In 2024, more than 20 companies were using the data consent service.

Contact: [email protected]

The data consent service allows:

  • to give, review, and revoke consents;
  • the data recipient to review the consents given to them for the release of data;
  • the database to check whether consent has been given to the data recipient when issuing personal data.

The data consent service has several good features for its users:

  • convenient – consent is always given in one trusted environment, regardless of the service provider;
  • transparent – consents and their usage history are available and managed in one place;
  • safe – consents are stored in a national database with a high level of security.

Use of the data consent service

A valid strong authentication tool (ID-card, Mobile-ID, or Smart-ID) is required to use the data consent service.

Giving consent always starts in the environment of the service provider, from where the person is directed to the state portal eesti.ee to give consent. After giving or not giving consent, the process continues in the environment of the service provider.

In addition to giving consent, the users can use the state portal to see all given consents, their content, validity periods, and history of use. Consents can be withdrawn at any time in the state portal.

The process of joining the data consent service

Prerequisites for using the data consent service:

  1. the company has joined X-tee;
  2. the database creates and registers the service it provides on a consent basis.

The process of joining the data consent service begins with the database owner:

  1. The company contacts the owner or the data processor of the database and agrees with the database on the use of the service for a specific purpose.
  2. You can find the universal application submitted to the owner of the database on this page, but more detailed information is available with each service.

Databases that have joined the data consent service

Last updated: 30.04.2026

search block image