From: "Hedda Leiren" <hedda@bislab.no>
To: "info - AKI" <info@aki.ee>
Subject: Bislab: inquiry about operating a credit reference agency in Estonia
Date: Fri, 17 Apr 2026 17:24:28 +0300
Message-ID: <CAJyQc4aQrN-Zcb+d+EE7_Zzve5hYNjqQTwkK2MPTTUNajDLvJQ@mail.gmail.com>
MIME-Version: 1.0
Content-Type: multipart/alternative;
	boundary="----=_NextPart_000_007D_01DCD0A2.431F0CE0"
Received-SPF: None (mail1.rit.ee: no sender authenticity  information available from domain of  postmaster@mail-dl1-f44.google.com) identity=helo;  client-ip=74.125.82.44; receiver=mail1.rit.ee;  envelope-from="hedda@bislab.no";  x-sender="postmaster@mail-dl1-f44.google.com";  x-conformance=spf_only
X-MS-Exchange-Organization-Network-Message-Id: 0ee9d523-fa94-48c3-a68a-08de9c8d12a0
X-MS-Exchange-Organization-AuthSource: DB5PEPF00014B96.eurprd02.prod.outlook.com
X-MS-Exchange-Organization-AuthAs: Anonymous
X-MS-Exchange-Transport-EndToEndLatency: 00:00:04.2793118
X-MS-Exchange-Processed-By-BccFoldering: 15.20.9818.014
Thread-Index: AQJkIf5tSQAn2ha8gWaXcXj2QE5Dow==
Content-Language: en-us
X-ThreatScanner-Verdict: Negative
X-Amp-Result: SKIPPED(no attachment in message)
X-Amp-File-Uploaded: False
X-DisclaimerOO: 1
X-MS-Exchange-Organization-ExpirationStartTime: 17 Apr 2026 14:24:45.0029
 (UTC)
X-MS-Exchange-Organization-ExpirationStartTimeReason: OriginalSubmit
X-MS-Exchange-Organization-ExpirationInterval: 1:00:00:00.0000000
X-MS-Exchange-Organization-ExpirationIntervalReason: OriginalSubmit
X-EOPAttributedMessage: 0
X-EOPTenantAttributedMessage: 8fe098d2-428d-4bd4-9803-7195fe96f0e2:0
X-MS-Exchange-Organization-MessageDirectionality: Incoming
X-MS-PublicTrafficType: Email
X-MS-TrafficTypeDiagnostic: DB5PEPF00014B96:EE_|AS8PR02MB6792:EE_|DU7PPF68F11E9A6:EE_
X-MS-Office365-Filtering-Correlation-Id: 0ee9d523-fa94-48c3-a68a-08de9c8d12a0
X-MS-Exchange-AtpMessageProperties: SA|SL
X-MS-Exchange-Organization-SCL: -1
X-Microsoft-Antispam: BCL:0;ARA:13230040|704162111799003|82310400026|43022699015|55112099003|13003099007|8096899003|19002099003|56012099003|16102099003|3613699012;
X-Forefront-Antispam-Report: CIP:213.184.53.4;CTRY:EE;LANG:et;SCL:-1;SRV:;IPV:CAL;SFV:NSPM;H:mail1.rit.ee;PTR:mail1.rit.ee;CAT:NONE;SFS:(13230040)(704162111799003)(82310400026)(43022699015)(55112099003)(13003099007)(8096899003)(19002099003)(56012099003)(16102099003)(3613699012);DIR:INB;
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 17 Apr 2026 14:24:44.7262
 (UTC)
X-MS-Exchange-CrossTenant-Network-Message-Id: 0ee9d523-fa94-48c3-a68a-08de9c8d12a0
X-MS-Exchange-CrossTenant-Id: 8fe098d2-428d-4bd4-9803-7195fe96f0e2
X-MS-Exchange-CrossTenant-AuthSource: DB5PEPF00014B96.eurprd02.prod.outlook.com
X-MS-Exchange-CrossTenant-AuthAs: Anonymous
X-MS-Exchange-CrossTenant-FromEntityHeader: Internet
X-MS-Exchange-Transport-CrossTenantHeadersStamped: AS8PR02MB6792
X-MS-Exchange-ExternalInOutlookResult: NotEnabled
X-Microsoft-Antispam-Mailbox-Delivery: ucf:0;jmr:0;auth:0;dest:I;ENG:(910005)(944506478)(944626604)(4710137)(4717077)(4999163)(920097)(930201)(20251009189)(140003);
X-Microsoft-Antispam-Message-Info: =?us-ascii?Q?8yb8QtfW/LpDb44oZCjv6vhm9hAcSSz40rIY0M9QFy5np3JTZM7AcQWoZf5u?=
 =?us-ascii?Q?yVzZEv/1Go0UrAPf6qolCINrpJoVWIioe2mRXujSzTyjX3TCenApwyfxRySf?=
 =?us-ascii?Q?jSKg58apsOEXRDWCXIpvrtjEWDlNlP96MeGHVdmtRBwZg6IwfQtHTeGFKoln?=
 =?us-ascii?Q?FaWQGhxvP9wJc0JdDU3HtfUG8LHSf4WnCt1GhQwsEdBjwvV3EVM16UD5NE0I?=
 =?us-ascii?Q?n/ZRngjjz6dLF01Qjk5r8XuAHSl6O/8nLXS0S6xWlujlfnmjk6NeLfQkQwjr?=
 =?us-ascii?Q?+UsnwhtCBPV4XTTNWWdrGq/Y0WSjy4FDSQPH75j2HEFBIgL2f7cn1T7kEffH?=
 =?us-ascii?Q?O38tUwAsSarDhARfYQ+nkTcDijw0nYXWKw2GTMT4X/ggoC7EDXa3+dICEz2Q?=
 =?us-ascii?Q?cMzVQlN26/WYOwvwpDf+BVVqfueASnWVaSnN1npjNRCb4cs58WhjjFiFHU7H?=
 =?us-ascii?Q?UHkIRJWUfXqaXrfPoCLrlVzaSpIIzIQ7dYEAOC0F08TySZUNCV8IosJtkm7g?=
 =?us-ascii?Q?HCbjcDNJIYDjEiZ5PYsbW5IDuHwSZMhdkMHJs9fmQAXVyDiAZf7K89Qw0fEA?=
 =?us-ascii?Q?pxxducUz8SY4hHBwkw56U321y1/YEnt53qKd72eOzhvfr8+xr/dPZ8vNNABZ?=
 =?us-ascii?Q?bV3rm9G7cTocAUBmAI9OrPcqQ8ArdLLAB7dJbc2NPBarUcueSHioDiYK3Sk8?=
 =?us-ascii?Q?5x6mrpWXOflwx+Jtl81JIEzbD77+9eL5pTu7GGZDVTLlWe9Mbcs
	Lu/3fSsZh?=
 =?us-ascii?Q?x2+fPgyZDWy8RdmlblwvKS6+1oNj01hw4Zr/h2Sbwk6Ia9MDkOeNR2U78cCM?=
 =?us-ascii?Q?rlUWuIzyBclQAanA2Q6L16w+1LG0E/52xpgCsK5c0vqSh4Nh13oWXenQhtEF?=
 =?us-ascii?Q?ZWSlQieVjuJtetRt1NCaCbMCY82E+HWE98FP5E3YcBI4gD0Ym9jOkGKKh670?=
 =?us-ascii?Q?yvefcBZYN+D76SfUz5T7jygfjPsT3VkRdV7dy7oCUsyJuklu7ZZfKtMr00ZC?=
 =?us-ascii?Q?CToAsUjwmqV/xcBEQ39KHQ9E9qtK9du0W24kFQCEO4KwvroK0ihu88EybMZK?=
 =?us-ascii?Q?bE2ylWRkahwb0WsHxSZu4BizmxXF+0OZponE+jOuKkfgRdq4u8fqVPvAdADc?=
 =?us-ascii?Q?JD+tYQpeJOm2aHJgyv/Jd6ahDJF1bp4y0EnKGj9wJ6ADOysruAsVnAmz0khv?=
 =?us-ascii?Q?sjzjIZzoblwySjHlKYgtQmOARdEsH3Kox5x3nRMBz+NXrPO1uu5HA12v4vsu?=
 =?us-ascii?Q?gaIap67za2SdGAF0Je1ONyxsPjCGUw43PYkZz83aYbJTpw8+I4mysT3vnSWk?=
 =?us-ascii?Q?E4AX1j5K4uvGJSIi8JUvhBBx4PAeZpGUEH/ENIthEV2zhCF5/tZsq2IySPuO?=
 =?us-ascii?Q?zedBx9+vqZ04qJ9vVs2UKokuLv5QBOrF1OpIm0Z4u7R6prDc8+vo+PJo722A?=
 =?us-ascii?Q?6v74/QgnOlLLFetpyVVJ2EVO2BknBxSFiV0KmEAsIpQoIS14ZRSDuyVjB72p?=
 =?us-ascii?Q?CG7SEHON5Bqrqu7LRKshkfuH2405wr+Axql4I
	DC8JpPulicuV0yaN3U5sbDU?=
 =?us-ascii?Q?9o8T4J6f/izx7lvaPJxGCEIRyLjnRYWu8DE8XBk7aN/0yNaKf6XD/XBQh+dW?=
 =?us-ascii?Q?tSOr45KnySPNTw7oFBlrHOErMc2dSyCIjGWXo4m2IljTs+JKleOm3LIodcbL?=
 =?us-ascii?Q?dQU3sUVBQslJxYmP3FOobQ4HcIDtQ+PV6v/hYZ6V6txL+bNk8ZPvxbmGrBnG?=
 =?us-ascii?Q?2uE/vVKASKF50d/QrLLhXw9zMkjHYTp4zLTX7HEq6WffT6fak/QNbT6URl7b?=
 =?us-ascii?Q?DRofGvJi6p60fUeAfeZ7C/74719fXP9fQkVgh3QER27LmUEAKsZNtCXzOwx2?=
 =?us-ascii?Q?HO9+DO9Rl4HtWouCCIw6RzepTbz7JeAPKt1k4s+tbnsQ4XWF2sdSd0L3R6MC?=
 =?us-ascii?Q?CWdJu7ZSFh/eenWY0DHhJk669LDQqjjU0/XBtgx9icQij1k/qoBQin09JZh0?=
 =?us-ascii?Q?diB1DFrKzrUsOg4dI/2CqTfquLhlIq+oDWiSZlpGDRU4dMtsKUZ4iYl/3sPo?=
 =?us-ascii?Q?AMQilufbylwqaTJkyV4t9NqAczkaHaP4srahpMFhF4OloNz+ouBsc0soLf2Z?=
 =?us-ascii?Q?WELJD33ZzLcIm0zy5Onl7FOFe339P54foW0PP+h0sZ+hxmelTcl62rvxHaJI?=
 =?us-ascii?Q?zYkkxK7sHwIQicvEW9Pv17gzloeEBPa1qiaj5UwDdGdFGezlAwv3cZO+5sRa?=
 =?us-ascii?Q?XImAKqRc7WtSTo8guPrGjR/kjNKccwKX4BzpBJqrVtENrsaFar6/KdvRZJRi?=
 =?us-ascii?Q?F09rz07rPnZDqk9HkRz0AZu
	MK2qlLdtZyuMZvdpjTHz0OT4cIgFOX+DXuQdN?=
 =?us-ascii?Q?eE0z91tr19Yn4UZ5UnYUNOmHsAJ7v8d8KmzNREJWxmAR6JJB3WNsYfwB7KLq?=
 =?us-ascii?Q?2u4lYb+MLEPYaaQPjw7zEnT17DTgmb5cHkmdO60oAmux2fgKxwaT67Q/zjii?=
 =?us-ascii?Q?v7k0+tOIg3bzQ28cTcEK1sYBb/mQzhqOP170eQNXPxybky5M3z8x0M7NJLzY?=
 =?us-ascii?Q?io9bdm6ngeUttFDnFcpY0v7RJSCqimImz3FylhE+/IluFH70M7Ezkl0Paci3?=
 =?us-ascii?Q?gkUZ3Soz6tAuYIhnPteRbUPHTnb9+fTYVWxG4YrxMlrJlfYZh19l8BhlOuHd?=
 =?us-ascii?Q?i+tgzTg6T2WnOKKyeWYJEhqy3ehK50CgIPQLGpZok6zr3ygBLYaXPHI7m1tD?=
 =?us-ascii?Q?Et+efLvBM4VtB4Qsf+L2+UDwxc4e2QRAWCGZ4a7HrBYP3s6cN3yFHVwYVYnO?=
 =?us-ascii?Q?Ymbtx3av2774UwKOC9w+WY9Beyq4YFYlSFnuCuHTvU5z6fd9oLUujL4ZGjBn?=
 =?us-ascii?Q?KfM63XSnmFRco0dECEMIFBpmw+nErZF7wJ9yNp0JyqTz5Zrw895u42lA/O8I?=
 =?us-ascii?Q?391QFzfPGO/Npk7a4oDjytVCZNTVQb3gSRBMUwpc5X+okZtSsR/khEJKID82?=
 =?us-ascii?Q?1LOKf71zyUiym3ix0gvWgsPvgeHCutJMIDhMUTXgBUJn+xXP99YJCPONZjYz?=
 =?us-ascii?Q?qkxh7Sbkkvgc3mGrw6w+Gu4BWrpjuWsthub9rPFUfOzaSoyjpROFpylrhdpM?=
 =?us-ascii?Q?aGspRuZbk
	I0bfOyZd3iorpx3oEmqbDrD/2ilPCgHFiLKXbS8E8YpMjlA408o?=
 =?us-ascii?Q?q+dQb3L9uVwNk4gGic8hf0/3bwgsgYzgyXR8HYniNWLQvm6SVsGb4uFMCZUa?=
 =?us-ascii?Q?RHXayIXPuEi3SifcWvUVgBvh0LPeoq/ykRN5PXWNjQ=3D=3D?=
x-ms-exchange-organization-originalclientipaddress: 213.184.53.4
x-ms-exchange-organization-originalserveripaddress: 10.167.8.234
X-OlkEid: 000000007F0F576EF0ECF74E885BF26C9907C5B9070034AD76187591974DBF6C4F76951C873A0100020000000000922EEAE8ACD0F940825FE832B3A5BA86000000001D1C0000C72C44542053E8489C8BC79C3FC5514B

This is a multipart message in MIME format.

------=_NextPart_000_007D_01DCD0A2.431F0CE0
Content-Type: text/plain;
	charset="UTF-8"
Content-Transfer-Encoding: 8bit


Tähelepanu! Tegemist on välisvõrgust saabunud kirjaga.
Tundmatu saatja korral palume linke ja faile mitte avada.

Hi tjhere,

My name is Hedda Leiren, and I am Head of Legal at Bislab, a Nordic credit 
data company. We are in an early stage of evaluating whether to establish a 
locally incorporated entity in Estonia to operate as a credit reference 
agency.

We are compliance-first in our approach and want to understand the full 
regulatory picture before making any commitments. Specifically, we would 
like to understand what obligations a credit reference agency operating in 
Estonia would have under Estonian data protection law and the GDPR, and 
whether AKI has any published guidance for such entities. We would also 
welcome a conversation if there is an appropriate contact for new market 
entrant inquiries.

Thank you for any guidance you are able to provide.

---

EESTI KEELES:

Lugupeetud Andmekaitse Inspektsioon,

Minu nimi on Hedda Leiren ja olen Bislab'i õigusvaldkonna juht. Bislab on 
Põhjamaade krediidiandmete ettevõte. Oleme varajases etapis hindamas 
võimalust asutada Eestisse kohalik äriühing, mis tegutseks krediiditeabe 
agentuurina.

Meie lähenemine on vastavuspõhine ning soovime mõista täielikku 
regulatiivset pilti enne igasuguste kohustuste võtmist. Konkreetselt soovime 
teada, millised kohustused oleksid Eestis tegutseval krediiditeabe 
agentuuril Eesti andmekaitseseaduse ja GDPR-i alusel, ning kas Andmekaitse 
Inspektsioonil on selliste üksuste jaoks avaldatud juhiseid. Samuti 
tervitaksime vestlust, kui on olemas sobiv kontakt uutele turule 
sisenejatele.

Täname kõigi juhiste eest.

Lugupidamisega,
Hedda Leiren

Hedda Leiren

Head of Legal & Compliance, Bislab
Arbins gate 1, 0253 Oslo
+47 934 98 785 | hedda@bislab.no <mailto:hedda@bislab.no>  | www.bislab.no 
<http://www.bislab.no/>

------=_NextPart_000_007D_01DCD0A2.431F0CE0
Content-Type: text/html;
	charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

<meta http-equiv=3D"Content-Type" content=3D"text/html; =
charset=3Dutf-8"><table class=3D"MsoNormalTable" border=3D"0" =
cellspacing=3D"0" cellpadding=3D"0" align=3D"left" width=3D"100%" =
style=3D"width:100.0%;mso-cellspacing:0cm;mso-yfti-tbllook:1184; =
mso-table-lspace:2.25pt;mso-table-rspace:2.25pt;mso-table-anchor-vertical=
:paragraph;mso-table-anchor-horizontal:column;mso-table-left:left;mso-pad=
ding-alt:0cm 0cm 0cm 0cm"> <tbody><tr =
style=3D"mso-yfti-irow:0;mso-yfti-firstrow:yes;mso-yfti-lastrow:yes"><td =
style=3D"background:#910A19;padding:5.25pt 1.5pt 5.25pt 1.5pt"></td><td =
width=3D"100%" style=3D"width:100.0%;background:#FDF2F4;padding:5.25pt =
3.75pt 5.25pt 11.25pt; word-wrap:break-word" cellpadding=3D"7px 5px 7px =
15px" color=3D"#212121"><div><p class=3D"MsoNormal" =
style=3D"mso-element:frame;mso-element-frame-hspace:2.25pt; =
mso-element-wrap:around;mso-element-anchor-vertical:paragraph;mso-element=
-anchor-horizontal: column;mso-height-rule:exactly"><span =
style=3D"font-size:9.0pt;font-family: &quot;Segoe =
UI&quot;,sans-serif;mso-fareast-font-family:&quot;Times New =
Roman&quot;;color:#212121"> <strong>T=C3=A4helepanu! </strong>Tegemist =
on v=C3=A4lisv=C3=B5rgust saabunud kirjaga.<br>Tundmatu saatja korral =
palume linke ja faile mitte =
avada.<o:p></o:p></span></p></td></tr></tbody></table><div =
dir=3D"ltr">Hi tjhere,<div><br></div><div>My name is Hedda Leiren, and I =
am Head of Legal at Bislab, a Nordic credit data company. We are in an =
early stage of evaluating whether to establish a locally incorporated =
entity in Estonia to operate as a credit reference agency.<br><br>We are =
compliance-first in our approach and want to understand the full =
regulatory picture before making any commitments. Specifically, we would =
like to understand what obligations a credit reference agency operating =
in Estonia would have under Estonian data protection law and the GDPR, =
and whether AKI has any published guidance for such entities. We would =
also welcome a conversation if there is an appropriate contact for new =
market entrant inquiries.<br><br>Thank you for any guidance you are able =
to provide.<br><br>---<br><br>EESTI KEELES:<br><br>Lugupeetud =
Andmekaitse Inspektsioon,<br><br>Minu nimi on Hedda Leiren ja olen =
Bislab'i =C3=B5igusvaldkonna juht. Bislab on P=C3=B5hjamaade =
krediidiandmete ettev=C3=B5te. Oleme varajases etapis hindamas =
v=C3=B5imalust asutada Eestisse kohalik =C3=A4ri=C3=BChing, mis =
tegutseks krediiditeabe agentuurina.<br><br>Meie l=C3=A4henemine on =
vastavusp=C3=B5hine ning soovime m=C3=B5ista t=C3=A4ielikku =
regulatiivset pilti enne igasuguste kohustuste v=C3=B5tmist. =
Konkreetselt soovime teada, millised kohustused oleksid Eestis =
tegutseval krediiditeabe agentuuril Eesti andmekaitseseaduse ja GDPR-i =
alusel, ning kas Andmekaitse Inspektsioonil on selliste =C3=BCksuste =
jaoks avaldatud juhiseid. Samuti tervitaksime vestlust, kui on olemas =
sobiv kontakt uutele turule sisenejatele.<br><br>T=C3=A4name k=C3=B5igi =
juhiste eest.<br><br>Lugupidamisega,<br>Hedda Leiren</div><div><br =
clear=3D"all"></div><div><div dir=3D"ltr" class=3D"gmail_signature" =
data-smartmail=3D"gmail_signature"><div dir=3D"ltr"><b =
style=3D"color:rgb(34,34,34)"><font color=3D"#444444">Hedda =
Leiren</font></b><br><div dir=3D"ltr" style=3D"color:rgb(34,34,34)"><div =
dir=3D"ltr"><div><font color=3D"#444444">Head of Legal&nbsp;</font>&amp; =
Compliance<font color=3D"#444444">, Bislab</font></div><div><font =
color=3D"#999999">Arbins gate 1, 0253 Oslo</font></div><div><font =
color=3D"#999999">+47 934 98 =
785</font><span>&nbsp;</span>|<span>&nbsp;</span><a =
href=3D"mailto:hedda@bislab.no" style=3D"color:rgb(17,85,204)" =
target=3D"_blank">hedda@bislab.no</a><span>&nbsp;</span>|<span>&nbsp;</sp=
an><a href=3D"http://www.bislab.no/" style=3D"color:rgb(17,85,204)" =
target=3D"_blank">www.bislab.no</a></div></div></div></div></div></div></=
div>=0A=

------=_NextPart_000_007D_01DCD0A2.431F0CE0--