0:00:01.000,0:00:02.809
Almost 30 years ago,

0:00:02.833,0:00:06.750
my country was facing the need[br]to rebuild everything from scratch.

0:00:07.333,0:00:09.518
After years of Soviet occupation,

0:00:09.542,0:00:13.768
Estonia regained its independence,[br]but we were left with nothing.

0:00:13.792,0:00:18.226
No infrastructure,[br]no administration, no legal code.

0:00:18.250,0:00:20.125
Organizational chaos.

0:00:20.708,0:00:21.976
Out of necessity,

0:00:22.000,0:00:25.434
the state leaders back then[br]had to make some daring choices.

0:00:25.458,0:00:28.018
The ones that our country could afford.

0:00:28.042,0:00:30.934
There was a lot of[br]experimentation and uncertainty

0:00:30.958,0:00:32.768
but also a bit of luck involved,

0:00:32.792,0:00:35.434
particularly in the fact[br]that we could count on a number

0:00:35.458,0:00:37.018
of brilliant visionaries,

0:00:37.042,0:00:40.184
cryptographers and engineers.

0:00:40.208,0:00:42.476
I was just a kid back then.

0:00:42.500,0:00:46.792
Today, we are called[br]the most digital society on earth.

0:00:48.167,0:00:49.434
I'm from Estonia,

0:00:49.458,0:00:53.559
and we've been declaring[br]taxes online since 2001.

0:00:53.583,0:00:58.309
We have been using digital identity[br]and signature since 2002.

0:00:58.333,0:01:01.684
We've been voting online since 2005.

0:01:01.708,0:01:04.976
And for today, pretty much[br]the whole range of the public services

0:01:05.000,0:01:06.518
that you can imagine:

0:01:06.542,0:01:11.059
education, police,[br]justice, starting a company,

0:01:11.083,0:01:13.976
applying for benefits,[br]looking at your health record

0:01:14.000,0:01:16.059
or challenging a parking ticket --

0:01:16.083,0:01:19.143
that's everything that is done online.

0:01:19.167,0:01:21.934
In fact, it's much easier to tell you

0:01:21.958,0:01:25.351
what are the three things[br]we cannot yet do online.

0:01:25.375,0:01:28.768
We have to show up[br]to pick up our ID documents,

0:01:28.792,0:01:30.851
get married or divorced,

0:01:30.875,0:01:32.684
or sell real estate.

0:01:32.708,0:01:34.292
That's pretty much it.

0:01:36.208,0:01:39.809
So, that's why don't freak out

0:01:39.833,0:01:41.934
when I tell you that every year

0:01:41.958,0:01:45.851
I can't wait to start[br]doing my tax declaration.

0:01:45.875,0:01:46.893
(Laughter)

0:01:46.917,0:01:48.934
Because all I have to do

0:01:48.958,0:01:51.059
is sit on my couch with a mobile phone,

0:01:51.083,0:01:55.101
swipe a few pages with prefilled data[br]on income and deductions

0:01:55.125,0:01:56.809
and hit submit.

0:01:56.833,0:01:58.393
After three minutes,

0:01:58.417,0:02:01.059
I'm looking at the tax return amount.

0:02:01.083,0:02:05.393
It actually feels like[br]a quite rewarding experience.

0:02:05.417,0:02:07.434
No tax advisors,

0:02:07.458,0:02:09.726
no collecting receipts,

0:02:09.750,0:02:11.292
no doing the math.

0:02:12.625,0:02:15.393
And have I mentioned[br]that I have not visited a state office

0:02:15.417,0:02:16.958
for almost seven years?

0:02:18.667,0:02:21.976
Indeed, one of the features[br]of the modern life

0:02:22.000,0:02:24.184
that has no reason to exist anymore,

0:02:24.208,0:02:27.018
considering technological[br]possibilities of today,

0:02:27.042,0:02:29.684
is the labyrinth of bureaucracy.

0:02:29.708,0:02:32.351
We've almost got rid of it[br]completely in Estonia,

0:02:32.375,0:02:36.518
in an effort coordinated by the government[br]that has also digitized itself.

0:02:36.542,0:02:41.458
For instance, cabinet of ministers' work[br]in e-Cabinet is absolutely paperless.

0:02:43.375,0:02:46.476
The central idea behind this development

0:02:46.500,0:02:49.184
is transformation of the state role

0:02:49.208,0:02:52.125
and digitalization of trust.

0:02:52.833,0:02:54.101
Think about it.

0:02:54.125,0:02:57.976
In most countries, people[br]don't trust their governments.

0:02:58.000,0:03:01.059
And the governments don't trust them back.

0:03:01.083,0:03:04.351
And all the complicated[br]paper-based formal procedures

0:03:04.375,0:03:06.851
are supposed to solve that problem.

0:03:06.875,0:03:09.143
Except that they don't.

0:03:09.167,0:03:12.393
They just make life more complicated.

0:03:12.417,0:03:17.101
I believe Estonian experience is showing[br]that technology can be the remedy

0:03:17.125,0:03:18.934
for getting the trust back,

0:03:18.958,0:03:20.934
while creating an efficient,

0:03:20.958,0:03:24.976
user-centric service delivery system

0:03:25.000,0:03:28.458
that actively responds to citizens' needs.

0:03:29.833,0:03:33.768
We did not do it by digitizing[br]bureaucracy as it is.

0:03:33.792,0:03:38.184
But by rather agreeing[br]on a few strong, common principles,

0:03:38.208,0:03:40.684
redesigning rules and procedures,

0:03:40.708,0:03:43.309
getting rid of unnecessary data collection

0:03:43.333,0:03:45.268
and task duplication,

0:03:45.292,0:03:48.851
and becoming open and transparent.

0:03:48.875,0:03:50.268
Let me give you a glimpse

0:03:50.292,0:03:53.958
into some of the key e-Estonia[br]design principles today.

0:03:56.042,0:04:00.893
First, it is essential to guarantee[br]privacy and confidentiality

0:04:00.917,0:04:03.059
of data and information.

0:04:03.083,0:04:06.643
This is achieved[br]through a strong digital identity

0:04:06.667,0:04:08.518
that is issued by the state

0:04:08.542,0:04:10.559
and compatible with everything.

0:04:10.583,0:04:13.125
In fact, every Estonian has one.

0:04:14.000,0:04:18.559
The identity is doubled[br]with a strong digital signature

0:04:18.583,0:04:22.768
that is accepted, used and legally binding

0:04:22.792,0:04:25.500
both in Estonia and the European Union.

0:04:26.708,0:04:32.101
When the system can properly[br]and securely identify who is using it,

0:04:32.125,0:04:37.018
after logging in, it will provide access[br]to the personal data of the citizen

0:04:37.042,0:04:40.809
and all the public services[br]within one tool,

0:04:40.833,0:04:44.625
and allow to authorize anything[br]by signing digitally.

0:04:46.583,0:04:50.226
A second principle,[br]and one of the most transformative,

0:04:50.250,0:04:53.268
is called "Once only."

0:04:53.292,0:04:57.184
It means that the state[br]cannot ask for the same data

0:04:57.208,0:04:59.059
more than once,

0:04:59.083,0:05:02.893
nor can store it in more than one place.

0:05:02.917,0:05:04.184
For instance,

0:05:04.208,0:05:07.143
if you've already provided[br]your birth or marital certificate

0:05:07.167,0:05:09.101
to the population registry,

0:05:09.125,0:05:12.059
this is the only place[br]where this data is going to be held.

0:05:12.083,0:05:16.625
And no other institution[br]will be ever asking for it again.

0:05:17.583,0:05:20.684
Once only is a very powerful rule,

0:05:20.708,0:05:24.768
as it defines the whole structure[br]of the data collection in a country,

0:05:24.792,0:05:26.476
what information is collected

0:05:26.500,0:05:29.268
and who is responsible for maintaining it,

0:05:29.292,0:05:32.393
making sure we avoid[br]centralization of data,

0:05:32.417,0:05:34.184
duplication of data,

0:05:34.208,0:05:37.208
and guarantee that it's[br]actually up to date.

0:05:38.792,0:05:42.268
This distributed approach[br]also avoids the problem

0:05:42.292,0:05:45.059
of the single point of failure.

0:05:45.083,0:05:48.226
But since the data cannot be replicated,

0:05:48.250,0:05:50.351
or collected more than once,

0:05:50.375,0:05:53.309
it means that the design[br]has to keep in mind

0:05:53.333,0:05:56.851
secure and robust access[br]to that information at all times,

0:05:56.875,0:06:00.083
so the public institution[br]can offer a service.

0:06:01.208,0:06:05.559
This is exactly the role[br]of the data exchange platform

0:06:05.583,0:06:07.768
called the X-Road

0:06:07.792,0:06:10.708
that has been in use since 2001.

0:06:11.708,0:06:13.351
Just like a highway,

0:06:13.375,0:06:17.018
it connects public sector[br]databases and registries,

0:06:17.042,0:06:19.851
local municipalities and businesses,

0:06:19.875,0:06:25.309
organizing a real-time, secure[br]and regulated data exchange,

0:06:25.333,0:06:29.542
saving an auditable trace after each move.

0:06:31.500,0:06:34.143
Here's a screenshot of a live feed

0:06:34.167,0:06:37.059
showing all the requests[br]performed on the X-Road

0:06:37.083,0:06:40.458
and all the services[br]that it actually facilitates.

0:06:41.542,0:06:44.351
And this is the real picture

0:06:44.375,0:06:48.976
of all the connections between[br]public and private sector databases.

0:06:49.000,0:06:50.268
As you can see,

0:06:50.292,0:06:52.917
there is no central database whatsoever.

0:06:53.833,0:06:57.559
Confidentiality and privacy[br]are definitely very important.

0:06:57.583,0:06:59.476
But in the digital world,

0:06:59.500,0:07:02.476
reliability and integrity of information

0:07:02.500,0:07:04.708
is just critical for operations.

0:07:05.458,0:07:06.726
For instance,

0:07:06.750,0:07:09.059
if someone changes[br]your medical health record,

0:07:09.083,0:07:11.101
let's say allergies,

0:07:11.125,0:07:13.684
without you or your doctor knowing,

0:07:13.708,0:07:15.750
treatment could be deadly.

0:07:16.625,0:07:20.518
That's why in a digital society,[br]a system like an Estonian one,

0:07:20.542,0:07:23.309
when there's almost no paper originals,

0:07:23.333,0:07:26.934
there's almost only digital originals,

0:07:26.958,0:07:29.059
integrity of data,

0:07:29.083,0:07:31.934
data exchange rules, software components

0:07:31.958,0:07:34.292
and log files is paramount.

0:07:35.583,0:07:40.768
We use a form of blockchain[br]that we invented back in 2007,

0:07:40.792,0:07:44.143
way before blockchain even became a thing,

0:07:44.167,0:07:48.583
to check and guarantee[br]the integrity of data in real time.

0:07:49.417,0:07:51.768
Blockchain is our auditor

0:07:51.792,0:07:55.101
and a promise that no access to the data

0:07:55.125,0:07:58.292
or data manipulation remains unrecorded.

0:08:02.083,0:08:06.708
Data ownership is another key principle[br]in the design of the system.

0:08:07.625,0:08:12.059
Aren't you worried by the fact[br]that governments, tech companies

0:08:12.083,0:08:14.018
and other businesses around the world

0:08:14.042,0:08:17.434
claim data they've collected[br]about you is theirs,

0:08:17.458,0:08:21.601
generally refuse to give access[br]to that information,

0:08:21.625,0:08:24.976
and often fail to prove how it was used

0:08:25.000,0:08:27.167
or shared with third parties?

0:08:28.333,0:08:31.958
I don't know, for me it seems[br]like a quite disturbing situation.

0:08:34.083,0:08:37.684
The Estonian system[br]is based on the principle

0:08:37.708,0:08:42.226
that an individual is the owner[br]of the data collected about him,

0:08:42.250,0:08:47.309
thus has an absolute right[br]to know what information is collected

0:08:47.333,0:08:50.184
and who has been accessing it.

0:08:50.208,0:08:54.309
Every time a policeman,[br]a doctor or any state officer

0:08:54.333,0:08:57.893
is accessing personal information[br]of the citizens online,

0:08:57.917,0:09:02.309
first they only get to access it[br]after logging in

0:09:02.333,0:09:05.768
to the information they're authorized[br]to see to do their job.

0:09:05.792,0:09:09.809
And secondly, every time[br]they're making requests,

0:09:09.833,0:09:12.042
this is saved in a log file.

0:09:14.667,0:09:19.018
This detailed log file[br]is part of the state public services

0:09:19.042,0:09:21.268
and allows real transparency,

0:09:21.292,0:09:26.708
making sure no privacy violation[br]will remain unnoticed to the citizen.

0:09:28.000,0:09:31.684
Now, of course, this is only[br]a simplified summary

0:09:31.708,0:09:36.375
of all the design principles[br]that e-Estonia is built on.

0:09:37.917,0:09:40.333
And now, government is building up

0:09:41.458,0:09:45.476
to get ready for use[br]of artificial intelligence

0:09:45.500,0:09:49.226
and building a whole new generation[br]of public services --

0:09:49.250,0:09:50.851
proactive services

0:09:50.875,0:09:52.684
that would activate seamlessly

0:09:52.708,0:09:55.976
based on different life situations[br]that people might be in,

0:09:56.000,0:10:00.750
such as childbirth, unemployment[br]or starting a business.

0:10:03.250,0:10:04.518
Now, of course,

0:10:04.542,0:10:07.851
running a digital society[br]with no paper backup

0:10:07.875,0:10:09.417
can be an issue, right?

0:10:10.417,0:10:13.434
Even though we trust[br]our systems to be solid,

0:10:13.458,0:10:18.768
but one can never be too cautious[br]as we experienced back in 2007,

0:10:18.792,0:10:22.559
when the first cyberincident happened,

0:10:22.583,0:10:25.309
and it literally blocked[br]part of our networks,

0:10:25.333,0:10:28.667
making access to the services[br]impossible for hours.

0:10:29.583,0:10:31.226
We survived.

0:10:31.250,0:10:36.476
But this event put cybersecurity[br]at the very top of agenda,

0:10:36.500,0:10:40.917
both in terms of strengthening[br]the platform and backing it up.

0:10:41.958,0:10:46.518
So how do you back up[br]a country-wide system in a small state

0:10:46.542,0:10:48.667
where everything is super close?

0:10:49.500,0:10:53.768
Well for instance,[br]you can export a copy of the data

0:10:53.792,0:10:55.893
outside the country territory

0:10:55.917,0:10:59.542
to an extraterritorial[br]space of an embassy.

0:11:00.542,0:11:03.851
Today, we have those data embassies

0:11:03.875,0:11:08.309
that are holding the most critical[br]digital assets of Estonia,

0:11:08.333,0:11:11.393
guaranteeing continuity of operations,

0:11:11.417,0:11:12.934
protection of our data,

0:11:12.958,0:11:16.226
and most importantly, our sovereignty.

0:11:16.250,0:11:20.250
Even in case of a physical attack[br]on our territory.

0:11:22.042,0:11:24.018
Some of you might be thinking by now:

0:11:24.042,0:11:25.958
Where are the downsides?

0:11:27.083,0:11:29.559
Well, going all digital

0:11:29.583,0:11:34.851
is administratively, and let's be honest,[br]financially more efficient.

0:11:34.875,0:11:37.518
Interfacing primarily[br]with computer systems

0:11:37.542,0:11:40.351
might create an impression[br]that the human factor,

0:11:40.375,0:11:42.184
elected politicians

0:11:42.208,0:11:44.161
and participating in democratic processes

0:11:44.185,0:11:47.018
is somehow less important.

0:11:47.042,0:11:48.893
And there are also some people

0:11:48.917,0:11:51.434
who feel threatened[br]by pervasive technology

0:11:51.458,0:11:53.917
that might make their skills obsolete.

0:11:55.708,0:11:58.059
So all in all, unfortunately,

0:11:58.083,0:12:00.018
running a country on a digital platform

0:12:00.042,0:12:03.768
has not saved us[br]from political power struggles

0:12:03.792,0:12:06.393
and polarization in the society,

0:12:06.417,0:12:08.976
as we have seen in the last elections.

0:12:09.000,0:12:11.542
Well, until there are humans involved.

0:12:13.917,0:12:16.643
One last question.

0:12:16.667,0:12:19.059
If everything is location-independent

0:12:19.083,0:12:22.726
and I can access all of the services[br]from anywhere in the world,

0:12:22.750,0:12:25.809
why cannot others[br]tap into some of these services,

0:12:25.833,0:12:28.542
even if they don't reside[br]within Estonian borders?

0:12:30.000,0:12:31.476
Five years ago,

0:12:31.500,0:12:35.851
we launched a governmental start-up[br]called e-Residency program

0:12:35.875,0:12:40.393
that for today joins[br]tens of thousands of people.

0:12:40.417,0:12:45.726
These are businessmen and women[br]from 136 different countries,

0:12:45.750,0:12:48.851
who establish their[br]businesses digitally,

0:12:48.875,0:12:51.476
who do their banking online,

0:12:51.500,0:12:57.393
and who run their companies[br]virtually over e-Estonia platform,

0:12:57.417,0:13:01.101
within European Union legal framework,

0:13:01.125,0:13:04.851
using an e-identity card similar to mine

0:13:04.875,0:13:08.167
and all of that[br]from anywhere in the world.

0:13:09.625,0:13:13.143
The Estonian system[br]is location-independent

0:13:13.167,0:13:14.851
and user-centric.

0:13:14.875,0:13:20.018
It prioritizes inclusiveness,[br]openness and reliability.

0:13:20.042,0:13:24.268
It puts security[br]and transparency at its center.

0:13:24.292,0:13:28.184
And the data into the hands[br]of the rightful owner,

0:13:28.208,0:13:30.684
the person they refer to.

0:13:30.708,0:13:32.684
Don't take my word for it.

0:13:32.708,0:13:34.309
Try it.

0:13:34.333,0:13:35.684
Thank you.

0:13:35.708,0:13:40.250
(Applause)