According to the Commercial Code (CC) an entrepreneur is entitled to operate as a natural person or as a company. Operating as a sole proprietorship may one day prove itself impractical, e.g. when operating as a sole proprietorship transition to operating as a company in case of business expansion may be necessary
In case of processing personal data, meaning performing operations on personal data, , e.g. collecting, storing, using, etc., the person conducting it, may be a natural person or a legal person, if the person processes personal data or it is done on behalf of the person. Persons processing personal data are divided into a controller and a processor. When it comes to cloud services, the cloud service provider is usually a processor, who processes personal data on behalf of the controller
Management board members are often acting without any written agreement or by mistake by having an employment agreement instead of management board member service agreement. The Employment Contracts Act (§ 1 Section 5) states expressly that provisions concerning employment contracts shall not be applied to contracts of members of a directing body (management board or supervisory board of a company. Thus, the legislator does not see the management board member as a weaker party who needs to be protected.
In April, the Estonian Data Protection Inspectorate published its 2016 yearbook, in which it directed attention to the new general data protection regulation (GDPR). The GDPR already enters into force as early as May 25th of 2018.