Digital government
Estonia
How can citizens avoid carrying the same information from one agency to another without losing control over their data?
Why repeat information the state already has?
Separate agencies can turn citizens into document couriers. The challenge is to allow necessary queries without granting indiscriminate access.
X-tee connects systems through access agreements. Exchanges use authentication, authorisation, encryption, signatures and operation logs. Those responsible for the data retain control; the solution does not require a single national register containing all information. [1]
The service identifies the information needed
The authorised agency queries the source
The response and access are recorded
What the evidence shows
The Estonian Information System Authority (RIA) documents a specific use: checking a driving licence directly in the transport register, without requiring the person to carry the physical document. This demonstrates an operational function; it does not by itself measure total time or money saved. [1]
Costs and delivery
Participation requires security infrastructure, service integration and agreement among participants. The page consulted does not consolidate national implementation and maintenance costs. [1]
Limits of the comparison
Connecting systems does not automatically correct inaccurate data. Purpose, permissions, human assistance and the ability to challenge errors need to be part of the design.
How can I find out who used my data?
Citizens need to understand how their information is used, rather than merely trust a promise that systems are secure.
Data Tracker displays records of operations involving personal data on the eesti.ee portal. RIA provides a protocol; those responsible for the databases need to implement the corresponding integration. [2]
The agency records the operation
The integration reports the data use
The person consults the records on the portal
What the evidence shows
The documentation shows how the service is organised. It does not establish that every access to every database is automatically covered, or that logging alone prevents abuse. [2]
Costs and delivery
The technical solution received financing from the European Regional Development Fund. Integrating each database and maintaining the records remain operational responsibilities; this profile does not provide a consolidated total cost. [2]
Limits of the comparison
A record needs to be understandable and support investigation. The number of queries does not equate to service quality or effective privacy protection.
OpenGov3's interpretation
What it can teach Brazil
An adaptation would start with a clearly bounded service journey, a legal basis, responsible parties, data quality and a channel for correcting errors. The question is which supporting documents can stop being requested, rather than how many systems can be connected.
What to monitor when adapting it
- Total time until the request is resolved
- Repeated documents and registration errors
- Unauthorised access and correction requests
- Service for people unable to use the digital channel
These are criteria for analysis, not commitments already made or estimated outcomes for Brazil. A well-documented practice is not, by itself, causal proof of an entire country's success.
Sources consulted
Consulted on 10/21/2026. Each result retains its observed period; institutional descriptions and impact evaluations have different scopes.
- RIA: Data exchange layer X-tee (opens in a new tab)
Official description of data exchange, permissions and participants' responsibilities.
- RIA: Data tracker (opens in a new tab)
Operation, integration by public bodies and funding of the solution for viewing data-use records.