The Penal Code, entered into force September 1, 2002.

Estonia ratified the Council of Europe Cybercrime Convention on May 12, 2003.

§ 206. Computer sabotage

(1) Unlawful replacement, deletion, damaging or blocking of data or programs in a computer, if significant damage is thereby caused, or unlawful entry of data or programs in a computer, if significant damage is thereby caused, is punishable by a pecuniary punishment or up to one year of imprisonment.

(2) The same act, if committed with the intention to interfere with the work of a computer or telecommunications system, is punishable by a pecuniary punishment or up to 3 years’ imprisonment.

§ 207. Damaging of connection to computer network

Damaging or obstructing a connection to a computer network or computer system is punishable by a pecuniary punishment.

§ 208. Spreading of computer viruses

(1) Spreading of a computer virus is punishable by a pecuniary punishment or up to one year of imprisonment.

(2) The same act, if committed:

1) at least twice, or

2) in a manner which causes significant damage,

is punishable by a pecuniary punishment or up to 3 years’ imprisonment.

§ 217. Unlawful use of computer, computer system or computer network

(1) Unlawful use of a computer, computer system or computer network by way of removing a code, password or other protective measure is punishable by a pecuniary punishment.

(2) The same act, if it:

1) causes significant damage, or

2) is committed by using a state secret or a computer, computer system or computer network containing information prescribed for official use only,

is punishable by a pecuniary punishment or up to 3 years’imprisonment.

§ 284. Handing over protection codes

Unlawfully handing over the protection codes of a computer, computer system or computer network, if committed for the purpose of personal gain and in a manner which causes significant damage or results in other seriuos consequences is punishable by a pecuniary punishment or uo to 3 years’ imprisonment.

Computer-related offences is covered by computer-related fraud (§ 213).