Four lessons from building the most digital society in the world

eptember 2020

by Adhele Tuulas

creative assistant

Reaching greater heights often requires extracting lessons from past experiences and applying them to future pursuits. This idea tends to apply to all aspects of life – digital transformation is no different. Although Estonia’s story of becoming “the most advanced digital society in the world” may be underlined by a sequence of seemingly logical positive outcomes, the digital success of any country is never predetermined.

It is hindsight that has helped us map out the past 30 years of digital transformation as a continuous journey. From shaping a favourable legal system to establishing secure data exchange to implementing a nationwide digital identity.

The world seems to now look to Estonia for the secret to the successful digital transformation of a state. And the secret is… there is none. From decades of sharing our experiences, we have seen that every country needs to pave their own path to their unique digital success. But this definitely does not mean that they should do it alone.

After talking to a several representatives from Estonia’s public and private sector, we have compiled the four most valuable lessons from Estonia’s digital past that these experts deemed important.

Lesson #1: Courageous and patient digital-minded leadership

Naturally, we start from the ones leading the way. The leadership of a country that is on the path to digital transformation does not only need to be digital-minded. It also needs to exude characteristics that embody an understanding of what digital transformation entails – courage to experiment and patience to let big changes take effect.

Hannes Astok, Development Director at the e-Governance Academy, looks back fondly to the experimentation that led to the e-solutions that have become the core components of Estonia’s digital state. “When it came to nationwide ID-cards, the X-Road or even online tax declaration, there was no guarantee that any of it would work. But the courage to experiment was present throughout the public sector,” Astok notes.

The online tax declaration is a great example. “The Tax Board understood that the benefits of correct and timely tax declarations outweighed any potential risks,” Astok explains. “So they decided to experiment. From the digitalisation of the system to how they would encourage people to start using the online service.”

“They tried saying you could get your tax return within 5 days if you declare your taxes online. And it worked. Now, The Tax Board has to annually ask citizens to hold back and pace their tax declarations to avoid overwhelming the system on the first day. It’s incredible, I have not seen anything like this anywhere else in the world.”

Experimentation may sound like a rapid trial and error process. With digital transformation, however, we are still talking about big societal changes. Having witnessed these changes first-hand, Arne Ansper, Development Manager at Cybernetica, finds it important to highlight that a big part of our success was also determined by an admirable societal stamina in adapting to change.

“The public IT-leadership remained patient during this societal adaptation period and the time it took for old thinking patterns to change,” Ansper remarks. Whether it comes to the adoption of the ID-Card or the slowly growing participation in i-Voting. “You have to give it time. These are such big changes. Maybe not even technically but precisely in how they fit into social patterns and behaviours.”

Lesson #2: Combining public and private sector forces

But leadership is not only about the few bright minds at the top. Rather, it is distributed between multiple stakeholders within the public and private sector. The second major lesson is therefore connected to combining forces to deliver digital excellence.

In addition to the observation on the leadership’s courage to experiment, Hannes Astok also emphasised the will and consensus between the public and private sector as well as universities in going through with established plans. “There was a mutual acknowledgement of shared responsibility and goals. No one decided to go their own way and later blame the other when things did not work out,” Astok notes.

Data exchange is a significant example. The fact that the X-Road has become the backbone of Estonia’s digital state, is primarily owed to the public-private partnership that laid its foundations. “Often you see that some sort of platform or application is built, but the necessary stakeholders do not hop on the boat. If you have effective public-private partnership from the beginning, this is less likely to happen. The adaptation period will be less painful.”

Lesson #3: Embedded transparency and trust … on all levels

We often hear the term “trust by design.” It was also brought forward as one of the major lessons by Indrek Õnnik, Global Affairs Director of the Government CIO Office at the Ministry of Economic Affairs and Communications. At its core, this refers to embedding security and privacy at every stage of technological development.

On a more philosophical level, however, we can also talk about more general principles, such as transparency. “For example, we support open-source software and our systems are, by a matter of principle, designed without any backdoors,” Õnnik emphasises. “That is what we are known for and that is definitely the direction we want to keep pursuing.”

Once the “promise” of transparency has been made, it must be upheld as much as possible… also during the times when things go wrong. In August 2017, the Estonian Information System Authority was informed about a security weakness that affected about 800,000 Estonian ID cards – one of the main means of authentication and electronic signing, which over 67% of Estonians use on a daily basis.

“The first decision was that we will not hide anything and as much as we could, talk about the situation openly,” says Margus Arm, the current Director of the State Information System Authority. “We chose to disclose what we are dealing with, where we are heading and the risks we are facing. We hoped that this openness would maintain the citizens’ trust in our digital state.” Authorities quickly provided the means for the remote renewal of the affected ID cards, out of which half were renewed by the end of the year.

Looking back, this was certainly the right approach. Only a few months after the incident, local elections saw the greatest number of i-voters to date. This was one of the indications that people’s trust in the state’s digital infrastructure did not suffer a tremendous hit. It is believed that the strategic, transparent and incredibly quick action taken by the authorities played a significant role in that.

Lesson #4: Context is everything

The final lesson will take us right back to the beginning of this article, where we brought up experience sharing. This is something we, at the e-Estonia Briefing Centre, and Estonia’s public and private sector representatives have been doing for years. We believe that if digital excellence was possible here, it is possible anywhere.

We are however also aware that it is not always an easy path, as our solutions cannot be merely copy-pasted. Taavi Einaste, CEO of Nortal Germany, chose to highlight just that, as he shared the company’s observations from the past 20 years of delivering digital transformation in Estonia and across the world. “We, as Estonians are proud of what we have achieved. We are inspired to tell our story and support digitalisation in other countries,” Einaste points out.

“But when it comes to building digital infrastructure elsewhere, we have to be honest and admit something upfront – Estonia’s digital solutions will not work in other countries the same way they worked here. Digitalisation is highly context dependent. Effective digital strategies must, therefore, be shaped in accordance to the local context – taking into consideration everything from legislation to culture.”

Once this is established as the starting point, digitalisation truly becomes possible anywhere. And the lessons, such as the ones outlined in the given article, become transferable to all countries around the world.

________________

The e-Estonia Briefing Centre – gateway to Estonian expertise in e-governance, invites you to connect with the Estonian IT companies directly responsible for the successful functioning of the e-state even during a pandemic. Get in touch with us to set up your custom virtual programme with the best partners you could get: business.e-estonia@eas.ee

Resouce: e-estonia

Estonia’s coronavirus app HOIA – the product of a unique, private-public partnership

September 2020

by Justin Petrone

It really was like something out of a Marvel movie. When faced with an unprecedented evil, Iron Man, Captain America, and the Incredible Hulk team up and save the day. The situation was much the same this past spring in Estonia when the country was looking at ways to stem the spread of COVID-19. Still, in this case, the superheroes were a motley ensemble of Estonian IT companies and state institutions that wanted to develop a new application for tracing the contacts of people infected with the disease. The resulting coronavirus app, called HOIA, was rolled out on August 20 and has been downloaded more than 113,000 times since. The private-public partnership that produced HOIA also impressed its makers, not least because they did it so quickly and for free.

“To our knowledge, this is the first time such a large-scale endeavor has been successfully undertaken in such a form,” said Kristjan Aiaste, managing director of the Tallinn-based IT firm Iglu, which was responsible for technical project management, user experience (UX) analysis, and user interface (UI) design of the HOIA app. “As we needed to act quickly and many IT companies were willing to participate, there was no time nor a need for a complicated, time-consuming procurement process,” he noted. “So, the app was developed free of charge.”

HOIA — which means “take care” in Estonian — can be used to inform the contacts of those infected with the virus and to provide them with instructions on what to do if they have been in close contact with someone who tests positive. The aim is to prevent the further spread of the virus and alert those exposed to seek treatment and undertake preventative measures.

The coronavirus app relies on Bluetooth low energy technology or BLE. Phones with the app installed can pick up Bluetooth signals from nearby phones, and if the signal is close and frequent enough, anonymous codes will be collected and stored on the phone that refers to that individual. Should a person with the HOIA app installed be infected, they can alert the app, and those who are considered to have been in close contact with that person will thus be immediately notified.

The identity of the infected person, therefore, remains anonymous throughout the process.

Building on international best practice 

The idea for the application did not originate in Estonia. Aiaste noted that the concept of using mobile phones and BLE technology to trace the spread of COVID-19 and to help people take the necessary precautions against the disease was first implemented in Singapore, where the Singaporean Ministry of Health and Government Technology Agency designed and introduced the TraceTogether application in March. But privacy concerns made it impossible to use the Singaporean application in Estonia, which meant that local developers had to develop their own.

“The Singapore coronavirus app was made using the principle of a centralized application, where the state has data on who came into contact with whom, and the state decides who to inform and when,” noted Veiko Raime, CEO of Mobi Lab, a Tartu-based firm that led mobile application development on the project. “For Estonia, this approach did not ensure the desired level of privacy,” he said.

Instead, the Estonian team settled on a decentralized approach where user exposures are calculated only on their own devices. A partial solution appeared in April, when the Swiss Federal Institute of Technology Lausanne introduced decentralized privacy-preserving proximity tracing, or DP-3T, as an open protocol to enable the digital contact tracing of infected participants using BLE technology. The team behind HOIA then decided to use DP-3T as the basis for the new coronavirus app, while using the Exposure Notification API provided by Google and Apple.

“Estonia did not build its application from scratch,” noted Raimo. “We built on the analysis and work of internationally recognized teams,” he said. “And we got an application that is both transparent and privacy-friendly and secure.”

Private-public partnership

Ultimately more than a dozen companies and organizations took part in creating HOIA. In addition to Iglu and Mobi Lab, Icefire, a Tallinn-based technology firm, developed back-end systems for the app, as did the Health and Welfare Information Systems Center (TEHIK), a data and communication center overseen by the Estonian Ministry of Social Affairs. TEHIK also provides customer support for HOIA and is responsible for administering and hosting the app.

Tartu-based Mooncascade and FOB Solutions in Tallinn also contributed to mobile application development, while Velvet, a strategic design agency headquartered in Tallinn’s Telliskivi district, was responsible for branding the app and homepage development. Bytelogics and Fujitsu helped in app adoption areas, while the company ASA Quality Services helped test HOIA, and Heisi IT developed the patient portal.

The use of Estonia’s e-health electronic health records system, which relies on state-issued personal identification numbers, distinguishes this coronavirus app from similar tools in use elsewhere.

“In Estonia, we incorporated the national patient portal’s registry into the process of marking yourself infected,” noted Iglu’s Aiaste. “It’s required for the app’s user to verify the COVID-19 positive test result with his or her personal id,” he said. That way, users can be absolutely sure that the possible exposure notifications are only coming from people with positive test results.”

A particular focus on privacy and security

Cybernetica, a 23-year-old Tallinn company specializing in designing secure data systems, was responsible for security architecture and analysis, in cooperation with Guardtime, another Tallinn-based company that offers blockchain-based products, Aiaste noted. Dan Bogdanov, a board member of Cybernetica who helped develop HOIA, praised the teamwork that went into producing the app. “The development of HOIA was carried out under the banner of cooperation,” Bogdanov said. “After initial discussions during which the solution was agreed upon, everyone worked toward a common goal and did everything necessary to achieve it,” he said.

Privacy was a major issue for developers. Based on survey data, they knew that mitigating public apprehension about data sharing was a priority. In response, Cybernetica and its partners crafted a solution that processes as little personal data as possible but still achieves its goals.

“The security analysis and description of security measures for the entire application are public and transparent, and we are ready to explain to everyone how HOIA is different from other applications,” said Bogdanov. He noted that its privacy provisions have been well-received enough to have a swift uptake of the app, specifically in tech circles, following its launch.

Next steps

The next step for HOIA is to “achieve a warm reception more widely,” Bogdanov noted. To do this, developers must continue to “talk about the system, explain its features, and refute misinformation” about the security of the application, he said

Aiaste noted that downloads have indeed picked up in recent days, and as of mid-September, nearly a tenth of the Estonian population is using HOIA. He called this early adoption “encouraging,” and noted that there haven’t been advertising campaigns for the app yet.

Plans are also afoot to make HOIA available beyond Estonia. Aiaste noted that HOIA’s developers are working with teams from other countries to lay the foundation for the worldwide exchange of data between similar coronavirus apps used in other countries.

“A cross-border solution is definitely necessary and work towards this has begun,” he said.

The HOIA application can be downloaded from Google Play and the Apple App Store. More information is also available on the application’s website.

The e-Estonia Briefing Centre – gateway to Estonian expertise in e-governance, invites you to connect with the Estonian IT companies directly responsible for the successful functioning of the e-state even during a pandemic. Get in touch with us to set up your custom virtual programme with the best partners you could get: business.e-estonia@eas.ee

Resource: e-estonia

e-Estonia at Davos Digital Forum 2020

September 2020

Have you got plans for September 24? We suggest joining the Davos Digital Forum 2020. If you are into the latest news and hottest solutions in e-Governance, sign up to hear the keynote by e-Estonia’s Digital Transformation Adviser Anett Numa. If smart cities and AI are on your radar, join the two workshops led by Ms. Numa and our second Digital Transformation Adviser, Florian Marcus.

New technologies and digitalisation efforts directly impact all aspects of life, both societally and economically. Covid-19 has made clear how dependent we are on each other in this interconnected economy. The opportunities, risks, and unintended consequences are still subject to much discussion. It is indisputable is that we are all participants in this new, data-driven economy, and we have to come to terms with what this means.

The Davos Digital Forum tackles a wide range of different digitalisation aspects. Since 2018, this national and international think tank and the hands-on event have been held to show how to implement digital solutions in your environment. And, naturally, e-Estonia couldn’t miss this event to share all of our know-how as one of the world’s leading digital societies.

Hot stuff 2020 from e-Estonia

Our Digital Transformation Adviser Anett Numa, gives a keynote titled “Hot stuff 2020 – new solutions from Estonia”.

e-services

You will hear the latest news about Estonia’s National AI strategy.  Ms. Numa will also let you in on all the newest proactive and seamless government services.

Solutions for smart cities

If you are after the hottest smart city solutions, you wouldn’t want to miss a workshop led by our Digital Transformation Adviser Florian Marcus.

Elderly

We will be showcasing two Estonian companies – Auve Tech and VisoryAuve Tech specialises in the development and manufacturing of autonomous vehicles and smart transportation systems. Visory helps make informed strategic decisions with AI using any camera feed.

AI to the rescue

AI is all the rage right now, and naturally, one of the world’s leading digital nations has a thing or two to showcase. e-Estonia’s Anett Numa, lets you know all of Estonia’s latest AI developments. And you’ll also get a more in-depth look at Veriff, a company that collects more data points than any other identity verification provider in the world. Another Estonian company, Pactum, offers a contract negotiation AI tool for large corporations involved in thousands of supplier contracts. Pactum helps bring all the “hidden values” in smaller vendor contracts humanly impossible to keep track of.

Looking forward to e-seeing you at the Davos Digital Forum on September 24! 

Resourse: e-estonia