Recruit
Estonia is unusual in Europe: its criminal records register is publicly searchable online. That makes verification easy, but the GDPR still governs what an employer may look up and what they may do with the result.
The public punishment register
Estonia maintains an electronic punishment register with public access to valid convictions, and anyone can query it. Candidates can also obtain an official extract through the state portal using their digital identity. The convenience is real, but availability is not the same as lawfulness. An employer still needs a legitimate reason connected to the role before looking someone up, and searching every applicant as a matter of routine is difficult to justify.
Where checks are expected
Criminal background verification is standard in financial services, private security, education, childcare, healthcare, transport, and public sector roles. Legislation specifically restricts people with certain convictions from working with children, which makes the check a genuine legal requirement rather than a preference in those settings.
What else employers can check
Identity, right to work, employment history, and academic qualifications are all straightforward, and Estonia’s digital infrastructure makes verification quick. Degrees can be confirmed through the education information system.
Data protection
The GDPR applies alongside the Estonian Personal Data Protection Act, supervised by the Data Protection Inspectorate. Conviction data attracts additional protection even where it is publicly accessible. Be transparent with the candidate that you intend to check, collect the minimum, and delete unsuccessful applicants’ data once recruitment closes.
Practical guidance
Decide which roles justify a register check and write down the reason, and tell candidates rather than checking quietly. An employer of record can manage this if you have no Estonian entity.
