0:00:00.992,0:00:02.786
Almost 30 years ago

0:00:02.810,0:00:06.761
my country was facing the need[br]to rebuild everything from scratch.

0:00:07.389,0:00:09.516
After years of Soviet occupation,

0:00:09.540,0:00:13.767
Estonia regained its independence[br]but we were left with nothing.

0:00:13.791,0:00:18.220
No infrastructure,[br]no administration, no legal code.

0:00:18.244,0:00:20.116
An organizational chaos.

0:00:20.704,0:00:21.905
Out of necessity,

0:00:21.929,0:00:25.450
the state leaders back then[br]had to make some daring choices.

0:00:25.474,0:00:28.022
The ones that our country could afford.

0:00:28.046,0:00:30.924
There was a lot of[br]experimentation and uncertainty,

0:00:30.948,0:00:32.749
but also a bit of luck involved,

0:00:32.773,0:00:35.423
particularly in the fact[br]that we could count on a number

0:00:35.447,0:00:37.003
of brilliant visionaries,

0:00:37.027,0:00:39.566
cryptographers and engineers.

0:00:40.289,0:00:42.089
I was just a kid back then.

0:00:42.511,0:00:46.772
Today, we are called the most[br]digital society on earth.

0:00:48.146,0:00:49.304
I'm from Estonia

0:00:49.328,0:00:53.199
and we've been declaring[br]taxes online since 2001.

0:00:53.575,0:00:57.836
We have been using digital identity[br]and signature since 2002.

0:00:58.329,0:01:01.368
We've been voting online since 2005.

0:01:01.712,0:01:04.982
And for the day, pretty much[br]the whole range of the public services

0:01:05.006,0:01:06.514
that you can imagine:

0:01:06.538,0:01:11.053
education, police, justice,[br]starting a company,

0:01:11.077,0:01:13.966
applying for benefits,[br]looking at your health record

0:01:13.990,0:01:16.077
or challenging a parking ticket,

0:01:16.101,0:01:18.634
that's everything that is done online.

0:01:19.157,0:01:21.955
In fact, it's much easier to tell you

0:01:21.979,0:01:24.988
what are the three things[br]we cannot yet do online.

0:01:25.368,0:01:28.772
We have to show up[br]to pick up our ID documents,

0:01:28.796,0:01:30.855
get married or divorced,

0:01:30.879,0:01:32.212
or sell real estate.

0:01:32.815,0:01:34.282
That's pretty much it.

0:01:36.220,0:01:39.791
So, that's why don't freak out

0:01:39.815,0:01:41.950
when I tell you that every year

0:01:41.974,0:01:45.869
I can't wait to start[br]doing my tax declaration.

0:01:45.893,0:01:46.893
(Laughter)

0:01:46.919,0:01:48.942
Because all I have to do

0:01:48.966,0:01:51.069
is sit on my couch with a mobile phone,

0:01:51.093,0:01:55.103
swipe a few pages with pre-filled data[br]on income and deductions,

0:01:55.127,0:01:56.277
and hit submit.

0:01:56.833,0:01:58.396
After three minutes,

0:01:58.420,0:02:01.063
I'm looking at the tax return amount.

0:02:01.087,0:02:04.620
It actually feels like[br]a quite rewarding experience.

0:02:05.436,0:02:07.443
No tax advisers,

0:02:07.467,0:02:09.737
no collecting receipts,

0:02:09.761,0:02:11.276
no doing the math.

0:02:12.610,0:02:15.387
And have I mentioned[br]that I have not visited a state office

0:02:15.411,0:02:16.944
for almost seven years?

0:02:18.665,0:02:21.958
Indeed, one of the features[br]of the modern life

0:02:21.982,0:02:24.188
that has no reason to exist anymore

0:02:24.212,0:02:27.014
considering technological[br]possibilities of today

0:02:27.038,0:02:29.171
is the labyrinth of bureaucracy.

0:02:29.712,0:02:32.371
We've almost gotten rid of it[br]completely in Estonia,

0:02:32.395,0:02:36.228
in an effort coordinated by the government[br]that has also digitized itself.

0:02:36.538,0:02:41.474
For instance, Cabinet of ministers work[br]in e-Cabinet is absolutely paperless.

0:02:43.355,0:02:46.466
The central idea behind this development

0:02:46.490,0:02:49.164
is transformation of the state role

0:02:49.188,0:02:51.816
and digitalization of trust.

0:02:52.847,0:02:54.109
Think about it.

0:02:54.133,0:02:57.974
In most countries, people[br]don't trust their governments.

0:02:57.998,0:03:01.053
And the governments don't trust them back.

0:03:01.077,0:03:04.331
And all the complicated[br]paper-based formal procedures

0:03:04.355,0:03:06.870
are supposed to solve that problem.

0:03:06.894,0:03:09.132
Except that they don't.

0:03:09.156,0:03:11.791
They just make life more complicated.

0:03:12.417,0:03:17.115
I believe Estonian experience is showing[br]that technology can be the remedy

0:03:17.139,0:03:18.949
for getting the trust back,

0:03:18.973,0:03:20.941
while creating an efficient,

0:03:20.965,0:03:24.988
user-centric service delivery system,

0:03:25.012,0:03:28.471
that actively responds to citizens' needs.

0:03:29.853,0:03:33.776
We did not do it by digitizing[br]bureaucracy as it is.

0:03:33.800,0:03:38.204
But by rather agreeing on a few[br]strong, common principles,

0:03:38.228,0:03:40.688
redesigning rules and procedures,

0:03:40.712,0:03:43.328
getting rid of unnecessary data collection

0:03:43.352,0:03:45.249
and tasked application,

0:03:45.273,0:03:48.225
and becoming open and transparent.

0:03:48.860,0:03:50.249
Let me give you a glimpse

0:03:50.273,0:03:53.769
into some of the key e-Estonia[br]design principles today.

0:03:56.041,0:04:00.890
First, it is essential to guarantee[br]privacy and confidentiality

0:04:00.914,0:04:02.514
of data and information.

0:04:03.088,0:04:06.645
This is achieved through[br]a strong digital identity

0:04:06.669,0:04:08.534
that is issued by the state

0:04:08.558,0:04:10.661
and compatible with everything.

0:04:10.685,0:04:13.105
In fact, every Estonian has one.

0:04:14.010,0:04:18.548
The identity is doubled[br]with a strong digital signature

0:04:18.572,0:04:22.755
that is accepted, used,[br]and legally binding

0:04:22.779,0:04:25.492
both in Estonia and European Union.

0:04:26.728,0:04:32.097
When the system can properly[br]and securely identify who is using it,

0:04:32.121,0:04:37.034
after logging in it will provide access[br]to the personal data of the citizen,

0:04:37.058,0:04:40.812
and all the public service within one tool

0:04:40.836,0:04:44.634
and allow to authorize anything[br]by signing digitally.

0:04:46.573,0:04:50.232
A second principle,[br]and one of the most transformative,

0:04:50.256,0:04:52.573
is called "Once only."

0:04:53.284,0:04:57.172
It means that the state[br]cannot ask for the same data

0:04:57.196,0:04:58.712
more than once.

0:04:59.069,0:05:02.364
Nor can store it in more than one place.

0:05:02.928,0:05:04.078
For instance,

0:05:04.102,0:05:07.150
if you've already provided your birth[br]or marital certificate

0:05:07.174,0:05:09.102
to the population registry,

0:05:09.126,0:05:12.048
this is the only place[br]where this data is going to be held.

0:05:12.072,0:05:16.611
And no other institution[br]will be ever asking for it again.

0:05:17.604,0:05:20.699
Once only is a very powerful rule,

0:05:20.723,0:05:24.259
as it defines the whole structure[br]of the data collection in a country.

0:05:24.775,0:05:26.489
What information is collected,

0:05:26.513,0:05:29.259
and who is responsible for maintaining it,

0:05:29.283,0:05:32.402
making sure we avoid[br]centralization of data,

0:05:32.426,0:05:34.180
duplication of data,

0:05:34.204,0:05:37.204
and guarantee that it's[br]actually up to date.

0:05:38.800,0:05:42.252
This distributed approach[br]also avoids the problem

0:05:42.276,0:05:44.342
of the single point of failure.

0:05:45.069,0:05:48.220
But since the data cannot be replicated,

0:05:48.244,0:05:50.490
or collected more than once,

0:05:50.514,0:05:53.315
it means that the design[br]has to keep in mind

0:05:53.339,0:05:56.863
secure and robust access[br]to that information at all times

0:05:56.887,0:06:00.074
so the public institution[br]can offer a service.

0:06:01.194,0:06:05.551
This is exactly the role[br]of the data exchange platform

0:06:05.575,0:06:07.774
called the X-Road,

0:06:07.798,0:06:10.702
that has been in use since 2001.

0:06:11.721,0:06:13.371
Just like a highway,

0:06:13.395,0:06:17.030
it connects public sector[br]data bases and registries,

0:06:17.054,0:06:19.871
local municipalities and businesses,

0:06:19.895,0:06:25.323
organizing a real-time secure[br]and regulated data exchange,

0:06:25.347,0:06:29.529
saving an auditable trace after each move.

0:06:31.498,0:06:34.139
Here's a screenshot of a live feed

0:06:34.163,0:06:37.053
showing all the requests[br]performed on the X-Road

0:06:37.077,0:06:40.477
and all the services[br]that it actually facilitates.

0:06:41.559,0:06:44.345
And this is the real picture

0:06:44.369,0:06:48.988
of all the connections between[br]public and private sector data bases.

0:06:49.012,0:06:50.163
As you can see,

0:06:50.187,0:06:52.920
there is no central data base whatsoever.

0:06:53.814,0:06:57.576
Confidentiality and privacy[br]are definitely very important.

0:06:57.600,0:06:59.496
But in the digital world,

0:06:59.520,0:07:02.490
reliability and integrity of information

0:07:02.514,0:07:04.720
is just critical for operations.

0:07:05.546,0:07:06.735
For instance,

0:07:06.759,0:07:09.069
if someone changes[br]your medical health record,

0:07:09.093,0:07:11.081
let's say allergies,

0:07:11.105,0:07:13.685
without you or your doctor knowing,

0:07:13.709,0:07:15.811
treatment could be deadly.

0:07:16.621,0:07:20.505
That's why in a digital society[br]a system like Estonian one,

0:07:20.529,0:07:23.323
where there's almost no paper originals,

0:07:23.347,0:07:26.918
there's almost only digital originals,

0:07:26.942,0:07:29.045
integrity of data,

0:07:29.069,0:07:31.926
data exchange rules, software components

0:07:31.950,0:07:34.275
and log files is paramount.

0:07:35.585,0:07:40.760
We use a form of blockchain[br]that we invented back in 2007,

0:07:40.784,0:07:44.142
way before blockchain even became a thing,

0:07:44.166,0:07:48.602
to check and guarantee the integrity[br]of data in real time.

0:07:49.396,0:07:51.761
Blockchain is our auditor

0:07:51.785,0:07:55.118
and a promise that no access to the data

0:07:55.142,0:07:58.275
or data manipulation remains unrecorded.

0:08:02.076,0:08:06.696
Data ownership is another key principle[br]in the design of the system.

0:08:07.641,0:08:12.066
Aren't you worried by the fact[br]that governments, tech companies,

0:08:12.090,0:08:14.002
and other businesses around the world

0:08:14.026,0:08:17.454
claim data they've collected[br]about you theirs,

0:08:17.478,0:08:21.616
generally refuse to give access[br]to that information,

0:08:21.640,0:08:24.974
and often fail to prove how it was used

0:08:24.998,0:08:26.931
or shared with third parties?

0:08:28.354,0:08:32.688
I don't know, for me it seems[br]like a quite disturbing situation.

0:08:34.080,0:08:37.690
The Estonian system[br]is based on the principle

0:08:37.714,0:08:42.141
that an individual is the owner[br]of the data collected about him.

0:08:42.165,0:08:47.299
Thus, has an absolute right to know[br]what information is collected

0:08:47.323,0:08:49.490
and who has been accessing it.

0:08:50.220,0:08:54.299
Every time a policeman, a doctor[br]or any state officer

0:08:54.323,0:08:57.910
is accessing personal information[br]of the citizens online,

0:08:57.934,0:09:02.299
first they only get to access it[br]after logging in

0:09:02.323,0:09:05.752
to the information they're authorized[br]to see to do their job.

0:09:05.776,0:09:09.791
And secondly, every time[br]they're making requests,

0:09:09.815,0:09:12.021
this is saved in a log file.

0:09:14.664,0:09:19.029
[unclear] log file is part[br]of the state public services

0:09:19.053,0:09:21.276
and allows real transparency,

0:09:21.300,0:09:26.704
making sure no privacy violation[br]will remain unnoticed to the citizen.

0:09:28.017,0:09:31.668
Now, of course, this is only[br]a simplified summary

0:09:31.692,0:09:36.386
of all the design principles[br]that e-Estonia is built on.

0:09:37.918,0:09:40.315
And now, government is building up

0:09:41.450,0:09:45.466
to get ready for use[br]of artificial intelligence

0:09:45.490,0:09:49.220
and building a whole new generation[br]of public services,

0:09:49.244,0:09:50.871
proactive services,

0:09:50.895,0:09:52.680
that would activate seamlessly

0:09:52.704,0:09:55.990
based on different life situations[br]that people might be in,

0:09:56.014,0:10:00.745
such as childbirth, unemployment[br]or starting a business.

0:10:03.269,0:10:04.444
Now, of course,

0:10:04.460,0:10:07.856
running a digital society[br]with no paper backup

0:10:07.880,0:10:09.414
can be an issue, right?

0:10:10.396,0:10:13.446
Even though we trust[br]our systems to be solid,

0:10:13.470,0:10:18.768
but one can never be too cautious[br]as we experienced back in 2007,

0:10:18.792,0:10:22.566
when the first cyber incident happened,

0:10:22.590,0:10:25.315
and it literally blocked[br]part of our networks,

0:10:25.339,0:10:28.702
making access to the services[br]impossible for hours.

0:10:29.583,0:10:30.733
We survived.

0:10:31.266,0:10:36.480
But this event put cyber security[br]at the very top of agenda,

0:10:36.504,0:10:40.624
both in terms of strengthening[br]the platform and backing it up.

0:10:41.956,0:10:46.511
So how do you back up[br]a country-wide system in a small state

0:10:46.535,0:10:48.669
where everything is super close?

0:10:49.490,0:10:53.752
Well for instance,[br]you can export copy of the data

0:10:53.776,0:10:55.895
outside the country territory

0:10:55.919,0:10:59.561
to an extraterritorial[br]space of an embassy.

0:11:00.522,0:11:03.839
Today, we have those data embassies

0:11:03.863,0:11:08.315
that are holding of the most critical[br]digital assets of Estonia,

0:11:08.339,0:11:11.387
guaranteeing continuity of operations,

0:11:11.411,0:11:12.942
protection of our data,

0:11:12.966,0:11:15.902
and most importantly, our sovereignty.

0:11:16.260,0:11:20.259
Even in case of a physical attack[br]on our territory.

0:11:22.035,0:11:24.003
Some of you might be thinking by now,

0:11:24.027,0:11:25.963
where are the downsides?

0:11:27.083,0:11:29.559
Well, going all digital

0:11:29.583,0:11:34.251
is administratively, and let's be honest,[br]financially more efficient.

0:11:34.862,0:11:37.529
Interfacing primarily[br]with computer systems,

0:11:37.553,0:11:40.339
might create an impression[br]that the human factor,

0:11:40.363,0:11:42.164
elected politicians,

0:11:42.188,0:11:44.149
and participating in democratic processes

0:11:44.173,0:11:46.378
is somehow less important.

0:11:47.061,0:11:48.878
And there are also some people

0:11:48.902,0:11:51.434
who feel threatened[br]by pervasive technology

0:11:51.458,0:11:53.925
that might make their skills obsolete.

0:11:55.688,0:11:58.064
So all in all, unfortunately,

0:11:58.088,0:12:00.005
running a country on a digital platform

0:12:00.029,0:12:03.778
has not saved us[br]from political power struggles

0:12:03.802,0:12:06.405
and polarization in the society,

0:12:06.429,0:12:08.990
as we have seen in the last elections.

0:12:09.014,0:12:11.531
Well, until there are humans involved.

0:12:13.927,0:12:15.934
One last question.

0:12:16.649,0:12:19.053
If everything is location-independent

0:12:19.077,0:12:22.744
and I can access all of the services[br]from anywhere in the world,

0:12:22.768,0:12:25.823
why cannot others tap[br]into some of these services,

0:12:25.847,0:12:28.555
even if they don't reside[br]within Estonian borders?

0:12:30.009,0:12:31.469
Five years ago,

0:12:31.493,0:12:35.842
we launched a governmental start-up[br]called e-Residency program

0:12:35.866,0:12:39.654
that for the day joins[br]tens of thousands of people.

0:12:40.429,0:12:45.715
These are businessmen and women[br]from 136 different countries,

0:12:45.739,0:12:48.834
who established their[br]businesses digitally,

0:12:48.858,0:12:51.461
who do their banking online,

0:12:51.485,0:12:57.403
and who run their companies virtually[br]over e-Estonia platform,

0:12:57.427,0:13:01.090
within European Union legal framework,

0:13:01.114,0:13:04.855
using an e-identity card similar to mine

0:13:04.879,0:13:08.186
and all of that[br]from anywhere in the world.

0:13:09.624,0:13:13.163
The Estonian system[br]is location-independent

0:13:13.187,0:13:14.862
and user-centric.

0:13:14.886,0:13:19.625
It prioritizes inclusiveness,[br]openness and reliability.

0:13:20.038,0:13:23.741
It puts security[br]and transparency at its center.

0:13:24.284,0:13:28.173
And the data into the hands[br]of the rightful owner,

0:13:28.197,0:13:30.181
the person they refer to.

0:13:30.722,0:13:32.666
Don't take my word for it.

0:13:32.690,0:13:33.840
Try it.

0:13:34.349,0:13:35.508
Thank you.

0:13:35.532,0:13:40.230
(Applause)