Estonia reforms banking secrecy laws amid data access concerns

Estonia tightens banking data access rules to curb legal loopholes

Estonia has moved to tighten rules on government access to banking data after concerns over legal gaps. Last summer, an inspection revealed that state agencies had made tens of thousands of requests to banks without a proper legal basis. The findings prompted a review of how authorities obtain financial information for anti-money laundering efforts. The issue came to light when Chancellor of Justice Ülle Madise found that existing laws did not clearly regulate state access to banking data. In response, Justice and Digital Affairs Minister Liisa Pakosta suspended queries through the enforcement register until agencies could prove compliance with stricter rules. She later noted that Estonia’s system, while fast, was the only one in Europe operating like an 'expressway' for preventing money laundering.

The government has now approved legislative changes to address the problem. The new bill clarifies—but does not expand—authorities’ powers to access data protected by banking secrecy. It requires the Money Laundering Data Bureau (FIU) to issue an administrative act and justify suspicions before making requests.

Finance Minister Jürgen Ligi warned that suspending access had weakened anti-money laundering work. The Ministry of Finance argued that quick, clear data exchange is essential to combat fraud, tax evasion, and financial crime. Officials also pointed out that similar systems exist in Finland, Sweden, and Germany, though Estonia’s approach had lacked sufficient legal safeguards. The amendments aim to close legal loopholes while maintaining efficient data sharing. Agencies like the Tax and Customs Board and the FIU will now operate under clearer rules. The changes follow a year of debate over balancing crime prevention with financial privacy protections.