Estonia

The Penal Code, entered into force September 1, 2002.

Estonia ratified the Council of Europe Cybercrime Convention on May 12, 2003.

§ 206. Computer sabotage
(1) Unlawful replacement, deletion, damaging or blocking of data or programs in a computer, if significant damage is thereby caused, or unlawful entry of data or programs in a computer, if significant damage is thereby caused, is punishable by a pecuniary punishment or up to one year of imprisonment.
(2) The same act, if committed with the intention to interfere with the work of a computer or telecommunications system, is punishable by a pecuniary punishment or up to 3 years’ imprisonment.

§ 207. Damaging of connection to computer network
Damaging or obstructing a connection to a computer network or computer system is punishable by a pecuniary punishment.

§ 208. Spreading of computer viruses
(1) Spreading of a computer virus is punishable by a pecuniary punishment or up to one year of imprisonment.
(2) The same act, if committed:
1) at least twice, or
2) in a manner which causes significant damage,
is punishable by a pecuniary punishment or up to 3 years’ imprisonment.

§ 217. Unlawful use of computer, computer system or computer network
(1) Unlawful use of a computer, computer system or computer network by way of removing a code, password or other protective measure is punishable by a pecuniary punishment.
(2) The same act, if it:
1) causes significant damage, or
2) is committed by using a state secret or a computer, computer system or computer network containing information prescribed for official use only,
is punishable by a pecuniary punishment or up to 3 years’imprisonment.

§ 284. Handing over protection codes
Unlawfully handing over the protection codes of a computer, computer system or computer network, if committed for the purpose of personal gain and in a manner which causes significant damage or results in other seriuos consequences is punishable by a pecuniary punishment or uo to 3 years’ imprisonment.
Computer-related offences is covered by computer-related fraud (§ 213).