- Reset +

"A lesson of Public e-Policy", Monday Note, 14 April 2013

14.04.2013

Edited by Frédéric Filloux

The small Baltic republic of Estonia is run like a corporation. But its president believes government must to play a crucial role in areas of digital policy such as secure ID.

Toomas Hendrik Ilves must feel one-of-a-kind when he attends international summits. His personal trajectory has nothing in common with the backgrounds of other heads of state. Born in Stockholm in 1953 where his parents had taken refuge from the Soviet-controlled Estonia, Ilves was raised mostly in the United States. There, he got a bachelor's degree in psychology from Columbia University and a master's degree in the same subject from the University of Pennsylvania. In 1991, when Estonia became independent, Ilves was in Munich, working as a journalist for Radio Free Europe (he is also fluent English, German and Latin.) Two years later, he was appointed ambassador to — where else? — the United States. In 2006, a centrist coalition elected him president of the republic of Estonia (1.4m inhabitants).

One more thing about Toomas Hendrik Ilves: he programmed his first computer at the age of 13. A skill that would prove decisive for his country's fate.

Last week in Paris, president Ilves was the keynote speaker at a conference organized by Jouve Group, a 3,000 employees French company specialized in digital distribution. The bow-tied Estonian captivated the audience with his straight speech, the polar opposite of the classic politician's. Here are abstracts from my notes:

"At the [post-independence] time, the country, plagued by corruption, was rather technologically backward. To give an example, the phone system in the capital [Tallinn] dated back to 1938. One of our first key decisions was to go for the latest digital technologies instead of being encumbered by analog ones. For instance, Finland offered to provide Estonia with much more modern telecommunication switching systems, but still based on analog technology. We declined, and elected instead to buy the latest digital network equipment".

Estonia's ability to build a completely new infrastructure without being dragged down by technologies from the past (and by the old-guard defending it) was essential to the nation's development. When I later asked him about the main resistance factors he had encountered, he mentioned legacy technologies: "You in France, almost invented the internet with the Minitel. Unfortunately, you were still pushing the Minitel when Mosaic [the first web browser] was invented". (The videotext-based system was officially retired at last in... 2012. France lost almost a decade by delaying its embrace of Internet Protocols.)

The other key decision was introducing computers in schools and teaching programming on a large scale. Combined to the hunger for openness in a tiny country emerging from 45 years of Soviet domination, this explains why Estonia has become an energetic tech incubator, nurturing big names like Kazaa or Skype (Skype still maintains its R&D center in Tallinn.)

"Every municipality in Estonia wanted to be connected to the Internet, even when officials didn't know what it was. (...) And we played with envy.... With neighbors such as Finland or Sweden, the countries of Nokia and Ericsson, we wanted to be like them."

To further encourage the transition to digital, cities opened Internet centers to give access to people who couldn't afford computers. If, in Western Europe, the Internet was seen as a prime vector of American imperialism, up in the newly freed Baltic states, it was seen as an instrument of empowerment and access to the world:

"We wanted a take the leap forward and build a modern country from the outset. The first public service we chose to go digital was the tax system. As a result, not only we eliminate corruption in the tax collection system — a computer is difficult to bribe –, but we increased the amount of money the state collected. We put some incentives in: When filing digitally, you'd get your tax refund within two weeks versus several months with paper. Today, more than 95% of tax returns are filed electronically. And the fact that we got more money overcame most of the resistance in the administration and paved the way for future developments".

"At some point we decided to give to every citizen a chip-card... In other words, a digital ID card. When I first mentioned this to some Anglo-saxon government officials, they opposed the classic "Big Brother" argument. Our belief was, if we really wanted to build a digital nation, the government had to be the guarantor of digital authentication by providing everyone with a secure ID. It's the government's responsibility to ensure that someone who connects to an online service is the right person. All was built on the publik key-private key encryption system. In Estonia, digital ID is a legal signature.The issue of secure ID is essential, otherwise we'll end-up stealing from ourselves. Big brother is not the State, Big Brother lies in Big Data."

"In Estonia, every citizen owns his or her data and has full access to it. We currently have about 350 major services securely accessible online. A patient, never gets a paper prescription; the doctor will load the prescription in a the card and the patient can go to any pharmacy. The system will soon be extended to Sweden, Denmark, Finland, Norway, as our citizens travel a lot. In addition, everyone can access their medical records. But they can chose what doctor will see them. I was actually quite surprised when a head of State from Southern Europe told me some paper medical records bear the mention "not to be shown to the patient" [I suspect it was France...]. As for privacy protection, the ID chip-card works both ways. If a policeman wants to check on your boyfriend outside the boundaries of a legal investigation, the system will flag it — it actually happened."

As the Estonian president explained, some good decisions also come out of pure serendipity:

"[In the Nineties], Estonia had the will but not all the financial resources to build all the infrastructure it wanted, such as massive centralized data centers. Instead, the choice was to interconnect in the most secure way all the existing government databases. The result has been a highly decentralized network of government servers that prevent most abuses. Again, the citizen can access his health records, his tax records, the DMV [Department of Motor Vehicles], but none of the respective employees can connect to another database".

The former Soviet Union had the small Baltic state pay the hard price for its freedom. In that respect, I recommend reading CyberWar by Richard Clarke, a former cyber-security advisor in the Clinton administration, who describes multiple cyber-attacks suffered by Estonia in 2007. These actually helped the country develop skillful specialists in that field. Since 2008, Tallinn harbors NATO's cyber defence main center in addition to a EU large-scale IT systems center.

Toomas Hendrik Ilves stressed the importance of cyber-defense, both at the public and private sector level:

"Vulnerability to a cyber attacks must be seen as a complete market failure. It is completely unacceptable for a credit card company to deduct theft from its revenue base, or for a water supply company to invoke cyber attack as a forcemajeure. It is their responsibility to protect their systems and their customers. (...) Every company should be aware of this, otherwise we'll see all our intellectual property ending up in China".

Original article on the Monday Note webpage.