Health and Safety in Estonia: 11 Duties for a Tallinn Office

Estonia is where a great many technology companies put their first continental European entity. Tallinn offers an English-speaking engineering market, a genuinely digital state, and a reputation for administrative simplicity that makes establishing a company unusually quick.
That reputation is deserved, and it produces a specific blind spot. Because setting the entity up was straightforward, foreign parents assume the ongoing obligations are equally light. They are not, and one of them is unlike anything in this series: your risk assessment does not sit in your document management system. It sits in a state database.
Eleven duties.
1. Every undertaking needs a working environment specialist
There is no threshold. A person performing the tasks of the working environment specialist must exist in every undertaking, and the employer may perform those tasks personally where they have the relevant knowledge and skills.
That last provision is genuinely helpful for a small entity, and it is also where groups go wrong: nobody was appointed, nobody has the knowledge, and the position defaults to being unfilled rather than to the employer holding it competently. The consolidated Act is published in English by Riigi Teataja.
2. The Labour Inspectorate is told who that person is
An obligation with a short deadline attached.
The employer notifies the Labour Inspectorate of the appointed specialist through the working environment database, or in a form reproducible in writing, within ten days of the appointment, giving their name, position and contact details.
This is a filing rather than an internal record, and a group that appointed somebody informally two years ago has almost certainly not made it.
3. Your risk analysis goes into a state database
Need Expert H&S Guidance?
Our qualified consultants can help you implement the right health & safety measures for your business.
The provision that distinguishes Estonia from every other jurisdiction covered in this series.
The employer prepares the risk analysis in the working environment database, or submits it to the Labour Inspectorate in a form reproducible in writing, and risk analyses are retained in that database.
Read that carefully. The state holds a copy of your risk assessment as a matter of routine, not on request after an incident. There is no version of compliance here in which the document exists only on your group intranet.
For a foreign parent used to producing an assessment and filing it internally, this changes the character of the obligation entirely. The Labour Inspectorate operates the system.
4. Retention runs to decades for older analyses
A specific and unusual figure.
Where a risk analysis was not entered into the database, or was compiled before the database obligation took effect in March 2021, the employer retains it for fifty-five years from the date it was compiled.
Fifty-five years exceeds the design life of any document system a group is likely to be running, and it exceeds most corporate retention schedules by a wide margin. If your Estonian entity predates 2021, establish where those documents are now.
5. A working environment representative at ten employees
Employees elect a representative in undertakings with ten or more workers, and where an undertaking has territorially separate structural units or works in shifts with more than ten workers in a unit or shift, a representative is elected for each.
That second limb matters for a company with two Tallinn locations or a support function running shifts, because the requirement multiplies rather than applying once.
6. That representative needs prescribed training, quickly
The representative must complete a training course of twenty-four hours within two months of election, under a prescribed training framework.
Two months is short, the course is specific, and this is the sort of obligation that gets missed because the election itself felt like the compliance event.
7. A working environment council at fifty
At fifty or more employees, a council is formed as a cooperation body with equal numbers of employer-appointed and employee-elected members, dealing with health and safety questions in the undertaking.
Fifty is the threshold that recurs across Europe, and a Tallinn engineering operation that has scaled past it without forming a council has an unmet structural obligation.
8. Health checks are triggered by screen work and by sitting
The provision most likely to surprise an office employer, and it applies directly.
The employer arranges health checks for employees whose health may be affected, according to the risk assessment, by listed hazards or by the nature of the work. That list includes physical and chemical agents you would expect, and it also expressly includes work with display screens and work in a constantly forced posture, including sitting or standing.
A software company in Tallinn is therefore squarely within the health check regime, not adjacent to it. This is one of the clearest examples in this series of a duty that a British-designed group standard simply does not contemplate.
9. Safety instructions for the work and the equipment
Beyond the risk analysis, the employer prepares safety instructions covering the work performed and the work equipment used.
These are workplace-specific documents rather than general policies, and they are what an inspector expects to see alongside the analysis.
10. Instruction and training before work begins, and again on change
Employees must be instructed and trained in health and safety before they start work, and the instruction must be repeated to the necessary extent when their tasks change, or when the employer gives them new work equipment or technology.
The trigger is change rather than a calendar, which means a group that runs an annual refresher and nothing else has covered the smaller half of the obligation.
11. A designated first aid giver, and internal control on an annual cycle
Two closing obligations that travel together.
The employer designates a first aid provider from among employees, taking account of the number of employees, the frequency of health damage, the regional distribution of the undertaking and the nature of its activity. Estonia does not set a ratio, so this is a judgement to make and record.
Separately, internal control is a continuous employer activity of planning, organising and monitoring the health and safety situation, and it must be reviewed and where necessary adjusted at least once a year.
Alongside these sit accident obligations: registering all accidents and occupational illnesses, making the results known to the person affected and to the representatives, and reporting to the Labour Inspectorate where there is temporary incapacity, serious injury or death.
What a Tallinn entity needs
| Duty | Trigger | Common position |
|---|---|---|
| Working environment specialist | Every undertaking | Nobody appointed |
| Notification to the Inspectorate | Within ten days of appointment | Never filed |
| Risk analysis in the database | Every employer | Held on a group intranet |
| Retention | Fifty-five years for older analyses | Not planned for |
| Representative | Ten employees, per unit or shift | Not elected |
| Representative training | Twenty-four hours within two months | Not arranged |
| Council | Fifty employees | Not formed |
| Health checks | Screen work and sustained sitting included | Assumed not to apply |
| Safety instructions | Per task and per equipment | Group policy only |
| Instruction and training | Before starting, and on change | Annual refresher only |
| First aid and internal control | Designated giver, annual review | Neither established |
Rows three and eight are the two to raise first. One changes where your documents live. The other establishes that an office of software engineers is inside a health surveillance regime it probably believes is irrelevant.
A reform is in progress
Worth knowing before you build anything.
During late 2025 the Estonian government consulted on amendments intended to reduce administrative burden, including proposals to limit the database filing obligation to employers above a headcount threshold, and to make representative elections and council formation dependent on a proportion of employees requesting them rather than on headcount alone.
Those were proposals rather than law at the time of writing. Confirm the current position through local advice, and treat this as a live area rather than a settled one. Estonia has form for moving quickly on administrative simplification.
Estonia alongside the Baltic and Nordic picture
Estonia derives its framework from the same EU Framework Directive 89/391/EEC as every other member state in this series, and has built distinctly digital machinery on top of it.
That is worth noting for a group standard. Sweden regulates the organisational and social working environment directly and renumbered its entire rulebook in 2025. Denmark requires a written workplace assessment from the first employee and publishes inspection outcomes. Norway adjusted its thresholds for smaller employers. Estonia files your assessment into a state database and expects health checks for screen work.
Four northern European systems, four different mechanisms, and a group document that satisfies none of them on its own. Holding one group view while each entity meets its own national test is where health and safety consultants and software are worth more together than either alone, and periodic health and safety audits confirm each entity's documents exist where its own law requires them to be.
Where Arinite fits
Arinite works with locally qualified practitioners in Estonia, so the specialist is appointed and notified, the analysis is filed where it belongs, and the health check regime is applied to the people it actually covers, while your group keeps one point of contact across every country. We support 1,500+ businesses across 50+ countries and protect 100,000+ employees, with 95%+ client retention over 15+ years. Our health and safety consultants work extensively with IT and software and finance and banking organisations, which describe most foreign-owned headcount in Tallinn.
Our global health and safety consultants handle the neighbouring jurisdictions that usually accompany an Estonian entity, and our international health and safety consultants can establish what is outstanding locally. The Estonian state portal publishes an overview of occupational health and safety in undertakings.
If your Tallinn entity has never filed a risk analysis into the working environment database, a free gap analysis is the right place to start.
Related Articles
Written by
Arinite Health & Safety Consultants
Health & Safety Expert at Arinite


