Leping

Leping_25.01.21_1.2-3.7_21_85 (1).asice

Digiallkirjad

Allkirjade kehtivust ei ole kontrollitud.

RAUL SIEM 37306050308 2021-01-22 09:02:17

MARIKA PRISKE PNOEE-46610054213 2021-01-23 15:16:12

SIGRID HARJO PNOEE-47610242716 2021-01-27 09:37:51

Kolmepoolne_Health_Sense_leping.pdf

PROJEKTILEPING nr ___________

Majandus- ja Kommunikatsiooniministeerium, registrikood 70003158, asukoht Suur-

Ameerika 1, 10122 Tallinn, mida esindab väliskaubandus- ja infotehnoloogiaminister Raul

Siem, kes tegutseb põhimääruse alusel (edaspidi ka Programmioperaator),

Ettevõtluse Arendamise Sihtasutus, registrikood 90006006, asukoht Lasnamäe 2, 11412

Tallinn, mida esindab juhatuse liige Sigrid Harjo, kes tegutseb põhikirja alusel (edaspidi

Programmi elluviija),

ja

Sotsiaalministeerium, registrikood 70001952, asukoht Suur-Ameerika 1, 10122 Tallinn, mida

esindab kantsler Marika Priske, kes tegutseb põhimääruse alusel (edaspidi Projekti elluviija),

edaspidi eraldi Pool ja koos Pooled,

arvestades, et Majandus- ja Kommunikatsiooniministeerium (edaspidi MKM) on Vabariigi

Valitsuse 05.07.2018. a määruse nr 55 „Aastatel 2014–2021 Euroopa Majanduspiirkonna

finantsmehhanismist ja Norra finantsmehhanismist vahendite taotlemise ja kasutamise

tingimused ja kord“ § 2 alusel programmi „Konkurentsivõime“ (edaspidi „Green ICT“)

Programmioperaator,

arvestades, et Ettevõtluse Arendamise Sihtasutus (edaspidi EAS) täidab Norra

finantsmehhanismist 2014–2021 ja riigieelarvest rahastatava programmi „Green ICT“ elluviija

ülesandeid MKMi ja EASi vahel 16.10.2018 sõlmitud lepingu 24.4-6/17-0524/8622 alusel,

arvestades, et 15.01.2021 kiitis Programmioperaator programmi koostöökomisjoni

protokollilise otsusega heaks Projekti elluviija projekti „Health Sense“,

sõlmivad käesoleva projektilepingu (edaspidi Leping) järgnevas:

1. ÜLDSÄTTED

1.1. Lepingu eesmärgiks on reguleerida Poolte õigusi ja kohustusi Eesti-Norra

koostööprogrammi „Green ICT“ vahenditest kaasrahastatud projekti „Health Sense“

(edaspidi Projekt) elluviimisel.

1.2. Projekti eelarve on kokku 2 000 000 (kaks miljonit) eurot, sh 1 000 000 (üks miljon) eurot

rahastatakse Norra finantsmehhanismist 2014–2021 ja 1 000 000 (üks miljon) eurot Eesti

riigi kaasfinantseeringust.

1.3. Programmioperaator eraldab Projekti elluviijale projekti teostamiseks programmi „Green

ICT“ vahenditest toetust maksimaalselt summas 2 000 000 (kaks miljonit) eurot, kattes

sellega Projekti abikõlblikud kulud 100% ulatuses, sh 50% ulatuses Norra

finantsmehhanismist ja 50% ulatuses Eesti riigi kaasfinantseeringust.

1.4. Kui Projekti elluviija kasutab projekti teostamisel partnereid, on Projekti partneri kulude

hüvitamisel toetuse määr 100% üksnes eeldusel, et Projekti partneri tegevus Projektis on

mittemajandusliku iseloomuga, mistõttu ei loeta makstavat toetust riigiabiks.

2

1.5. Projekti abikõlblikkuse perioodi alguskuupäev on 01.02.2021.

1.6. Projekti abikõlblikkuse perioodi lõppkuupäev on 31.01.2023.

1.7. Poolte esindajad Lepingu täitmisega seotud küsimustes on:

1.7.1. Programmioperaator – väliskoostöö valdkonna juht Tanel Tomson, tel. 639 7642,

e-post [email protected].

1.7.2. Programmi elluviija – koordinaator Anari Lilleoja (edaspidi kontaktisik), tel. 524

6477, e-post [email protected].

1.7.3. Projekti elluviija – Projekti teostamise eest vastutav isik, nutika arengu toetamise

osakonna nõunik Aivi Saar , tel. 626 9144, e-post [email protected].

1.8. Poolte esindajate muutumisest teavitatakse Pooli e-posti teel.

2. LEPINGU DOKUMENDID

2.1 Lepingu täitmisel juhindutakse alljärgnevatest dokumentidest (edaspidi Lepingu

dokumendid), kusjuures Lepingu dokumentide vahel vastuolude esinemisel on nende

pädevusjärjekord kõige tähtsamast alates järgmine:

2.1.1. Euroopa Liidu ja Norra Kuningriigi vahel 28.05.2016. a sõlmitud leping Norra

finantsmehhanismi kohta aastateks 2014-2021;

2.1.2. Norra Välisministeeriumi poolt 23.09.2016 vastu võetud „Norra finantsmehhanismi

rakendusmäärus“ (edaspidi rakendusmäärus)1;

2.1.3. Eesti Vabariigi ja Norra Kuningriigi vahel 09.05.2017 sõlmitud Norra

finantsmehhanismi rakendamist aastatel 2014–2021 käsitlev vastastikuse mõistmise

memorandum;

2.1.4. Eesti Vabariigi Rahandusministeeriumi ja Norra Kuningriigi vahel 26.04.2018 sõlmitud

Programmileping ning selle lisad;

2.1.5. Vabariigi Valitsuse 05.07.2018 määrus nr 55 „Aastatel 2014–2021 Euroopa

Majanduspiirkonna finantsmehhanismist ja Norra finantsmehhanismist vahendite

taotlemise ja kasutamise tingimused ja kord“;

2.1.6. käesolev Leping koos lisadega

2.1.7. Programmioperaatori poolt kokku kutsutud programmi koostöökomisjoni 15.01.2021

protokolliline otsus Projekti elluviija esitatud taotluse programmi „Green ICT“

eesmärkidele vastavaks tunnistamise kohta (Lepingu Lisa 1);

2.1.8. Projekti elluviija poolt 01.12.2020 esitatud taotlus koos eelarvega (Lepingu Lisa 2).

2.2. Viide Lepingule hõlmab ka viidet Lepingu dokumentidele, kui käesoleva Lepingu

konkreetsest punkti sõnastusest või sisust ei tulene teisiti.

2.3. Lepingu dokumentides reguleerimata küsimustes lähtutakse Eesti Vabariigis kehtivatest

õigusaktidest.

3. PROJEKTI ELLUVIIJA ÕIGUSED JA KOHUSTUSED NING KULUDE

ABIKÕLBLIKKUS

3.1. Projekti elluviija on õigustatud:

3.1.1. saama kontaktisikult tehnilist abi (informatsiooni- ja nõuandeteenused), mis on seotud

Lepinguliste kohustuste täitmisega; kontaktisikuga on võimalik ühendust saada telefoni

1 https://eeagrants.org/resources/regulation-implementation-norway-grants-2014-2021

3

või e-posti teel;

3.1.2. tegema Projekti eelarves muudatusi, mis on väiksemad kui 20% Projekti eelarves (vt

Lepingu Lisa 2) konkreetsele tegevusele ettenähtud eelarverea mahust, tingimusel, et

toetuse summa ei suurene ning Projektis ettenähtud eesmärgid ja tegevused ei muutu.

Projekti elluviija on kohustatud:

3.2.1. viima Projekti ellu taotluses, taotluse programmi eesmärkidele vastavaks tunnistamise

otsuses ning Lepingus fikseeritud tähtaegade ja tingimuste kohaselt;

3.2.2. kasutama toetust vastavuses taotluse, taotluse programmi eesmärkidele vastavaks

tunnistamise otsuse, Lepingu ja Lepingu dokumentidega;

3.2.3. tagama, et Projekti raames tehtud kulud vastavad rakendusmääruses sätestatud kulude

abikõlblikkuse tingimustele;

3.2.4. maksma toetuse tagasi tagasinõudmise otsuses näidatud summas ja tähtpäevaks;

3.2.5. vastama Programmioperaatori ja Programmi elluviija poolt esitatud küsimustele

Projekti elluviija, Projekti partnerite ja Projekti teostamise kohta;

3.2.6. esitama Programmi elluviijale tähtaegselt kogu nõutud informatsiooni ja

vahefinantsaruanded;

3.2.7. tagama, et Projekti elluviija eelarves on olemas Projekti abikõlblike kulude

hüvitamiseks vajalik Eesti riigi kaasfinantseeringu summa;

3.2.8. tagama, et Projekti elluviija ja partnerite raamatupidamises on toetatava Projekti kulud

ja neid kajastavad kulu- ja maksedokumendid muudest Projekti elluviija ja partnerite

kuludest ning kulu- ja maksedokumentidest selgelt eristatavad eraldiseisva

raamatupidamissüsteemiga või -koodidega ning vastavad üldtunnustatud

raamatupidamistavale;

3.2.9. säilitama taotluse, toetuse ja Projekti teostamisega seonduvat

originaaldokumentatsiooni vähemalt 31. detsembrini 2030. a;

3.2.10. võimaldama järelevalvet teostavale isikule juurdepääsu Projekti teostamisega seotud

ruumidesse ja territooriumidele, mida Projekti elluviija või partner omab, rendib või mis

tahes muul moel kasutab;

3.2.11. osutama auditi ja järelevalve kiireks läbiviimiseks viivitamatut ja igakülgset abi ning

andma kontrollija käsutusse kõik soovitud andmed ja dokumendid 3 (kolme) tööpäeva

jooksul arvates vastava teate saamisest;

3.2.12. viivitamata kirjalikult informeerima Programmioperaatorit kõigist esitatud andmetes

toimunud muudatustest või asjaoludest, mis mõjutavad või võivad mõjutada Projekti

elluviija ja/või partneri poolt oma kohustuste täitmist, sealhulgas nime, aadressi ja

seaduslike või volitatud esindajate muutumisest, ümberkujundamisest,

pankrotimenetluse alustamisest või likvideerija määramisest, tegevuse lõpetamisest ka

siis, kui eelnimetatud muudatused on registreeritud äriregistris või avalikustatud

massiteabevahendite kaudu;

4

3.2.13. viivitamata Programmioperaatorit kirjalikult informeerima Projekti teostamise käigus

ilmnenud Projekti negatiivse tulemuse suurest tõenäosusest või vältimatusest ning

Projekti edasise jätkamise kaheldavast otstarbekusest;

3.2.14. tagama Projekti kulude vastavuse kohalduvate õigusaktide ja Lepingu dokumentide

nõuetele ning täitma kõiki asjakohaseid kohalikke, siseriiklikke ja Euroopa Liidu

õigusakte;

3.2.15. tagama, et Projekti elluviija ja partneri raamatupidamise sise-eeskirjad ja auditeerimise

kord võimaldavad Projekti kohta deklareeritud kulude ja tulude otsest võrdlust vastavate

raamatupidamisaruannete ja tõendavate dokumentidega;

3.2.16. toetuse kasutamisel näitama kooskõlas rakendusmääruse lisas 32 sätestatud

tingimustega avalikkusele, et tegemist on Norra finantsmehhanismidest rahastatud

Projektiga, sh:

3.2.16.1. koostama kommunikatsiooniplaani, rakendama kommunikatsiooniplaanis

kirjeldatud tegevusi ning andma finantsvahearuannetes ülevaate

kommunikatsioonitegevustest;

3.2.16.2. korraldama projekti tutvustamiseks vähemalt kolm teavitamisüritust;

3.2.16.3. lisama Projekti elluviija veebilehele info projekti elluviimise ja toetuse saamise

kohta ning Norway Grants logod (logod on kättesaadavad FMO kodulehel

https://eeagrants.org/resources/norway-grants-logo-package);

3.2.17. Projekti elluviija ja partner peavad Projekti raames kaupu või teenuseid ostes järgima

oma asukohamaa riigi riigihangete regulatsioonis ja EL direktiivides hankijale

sätestatud kohustusi, sh viima vajadusel läbi nõuetekohase hanke;

3.2.18. teostama kõik Projekti raames tehtud kulude maksed Projekti elluviija või partneri

pangakontolt;

3.2.19. esitama Projekti vahefinantsaruanded ja maksetaotluse hiljemalt järgnevateks

kuupäevadeks:

3.2.19.1. 30.06.2021 (kulud 01.02.2021-31.05.2021);

3.2.19.2. 31.10.2021 (kulud 01.06.2021-30.09.2021);

3.2.19.3. 28.02.2022 (kulud 01.10.2021-31.01.2022);

3.2.19.4. 30.06.2022 (kulud 01.02.2022-31.05.2022);

3.2.19.5. 31.10.2022 (kulud 01.06.2022-30.09.2022);

3.2.19.6. 28.02.2023 (kulud 01.10.2022-31.01.2023);

3.2.20. esitama Projekti lõpparuande ja maksetaotluse e-toetuste infosüsteemi hiljemalt

31.03.2023;

3.2.21. taotlema Programmioperaatorilt kontaktisiku kaudu Lepingu muutmist, kui soovitakse

muuta:

3.2.21.1. Projekti tegevusi, mille tulemusena suureneb ühe või mitme eelarverea

maksumus kokku rohkem kui 20%;

2 https://eeagrants.org/resources/regulation-implementation-norway-grants-2014-2021-annex-3-information-and-

communication

5

3.2.21.2. Projekti partnereid;

3.2.21.3. Projekti toetuse summa jagunemist Projekti elluviija/partnerite lõikes, juhul kui

vähemalt ühe Projekti elluviija/partneri toetuse summa suureneb;

3.2.21.4. Projekti tegevuste elluviimise alguskuupäeva;

3.2.21.5. Projekti tegevuste elluviimise lõppkuupäeva;

3.2.21.6. Projekti eesmärke mõjutavaid tegevusi.

3.2.22. tagama partnerluslepingust ning muudest asjakohastest allikatest tulenevate kohustuste

täitmise Projekti partnerite poolt ning vastutama partneri poolsete rikkumiste eest.

3.3. Kulude abikõlblikkus

3.3.1. Kulude abikõlblikkuse osas lähtutakse rakendusmääruse 8. peatükis sätestatust;

3.3.2. Abikõlblikud on kulud, mis on põhjendatud, mõistlikud, õigusaktidega kooskõlas ja

otseselt vajalikud toetatavate tegevuste elluviimiseks ja Projekti eesmärkide

saavutamiseks. Projekti kulud peavad olema kooskõlas säästlikkuse, tulemuslikkuse ja

tõhususe põhimõtetega;

3.3.3. Abikõlblikud on järgmised kulud:

3.3.3.1. Projekti heaks tööle määratud isikute töötasu ja puhkusehüvitis ning seadusest

tulenevad maksud ja maksed. Töötasud peavad olema kooskõlas Projekti

elluviija ja partneri asutusesisese palgatasemega vastavasisulise töö eest. Töötaja

puhkusehüvitis on abikõlblik proportsionaalselt Projekti heaks töötatud ajaga;

3.3.3.2. võlaõigusliku lepingu alusel makstav tasu, mida maksustatakse sarnaselt

töötasuga ning tasult makstavad riiklikud maksud;

3.3.3.3. Projektis osalevate töötajate välislähetuse päevaraha vastavalt kehtivale

seadusandlusele;

3.3.3.4. Projektis osalevate töötajate välislähetuse sõidu- ja majutuskulu vastavalt

reisikulu standardiseeritud ühikuhindadele järgmistel tingimustel:

3.3.3.4.1. sõidukulu standardiseeritud ühikuhind marsruudil Eesti-Norra-Eesti või Norra-

Eesti-Norra on 285 eurot ühe reisija kohta;

3.3.3.4.2. majutuskulu standardiseeritud ühikuhind on 135 eurot/öö ühe reisija kohta ning

Eestis 100 eurot/öö ühe reisija kohta (põhjendatud juhtudel hüvitatakse

majutuskulu lisaks üks öö enne ja üks öö pärast sihtriigis ettenähtud ürituse,

kohtumise või muu sündmuse toimumist, kui Projekti elluviija esitab

vahefinantsaruandes sellekohase põhjenduse);

3.3.3.4.3. sõidu- ja majutuskulude tekkimise tõendamiseks esitab Projekti elluviija

vahefinantsaruandes kokkuvõtte toimunud välislähetusest, sh info reisi

toimumisaja, osalejate, eesmärgi, tegevuste ja saavutatud tulemuse kohta;

3.3.3.4.4. Projekti elluviija ei pea kulu tõendamiseks esitama kulu- ja maksedokumente

(arved, maksekorraldused, pardakaardid, transpordivahendi piletid, kütusetšekid

jms);

3.3.3.4.5. vajadusel on Projekti elluviija kohustatud esitama täiendavaid dokumente või

andma lisaselgitusi reisi programmi, osalejate jms kohta;

3.3.3.5. uute või kasutatud seadmete puhul üksnes see osa kulumist, mis vastab Projekti

kestusele ja tegelikule Projekti eesmärkidel kasutuse määrale;

3.3.3.6. tarbekaupade ja tarvikute kulu, tingimusel et need on eristatavad ja Projektile

eraldatud;

3.3.3.7. muude Projekti elluviija poolt Projekti elluviimise eesmärgil sõlmitud

lepingutega kaasnevad kulud, tingimusel et sõlmimine vastab kohaldatavatele

riigihanke ja käesoleva määruse eeskirjadele;

6

3.3.3.8. kaudsed kulud kuni 15% otsestest personalikuludest (punkt 3.3.3.1);

3.3.3.9. välispartneri kulude tõendamiseks piisab, kui Projekti elluviija esitab

välispartneri asukoha riigis tegutseva sõltumatu ja sertifitseeritud audiitori poolt

kinnitatud aruande, millest nähtub, et partneri poolt on Projektis tehtud kulud

vastavalt Lepingus sätestatud tingimustele, kohalikule seadusandlusele ja

üldtunnustatud raamatupidamistavale.

3.3.4. Mitteabikõlblikud on järgmised kulud:

3.3.4.1. intress võlalt, võla teenindamise tasud ja viivised;

3.3.4.2. finantstehingute tasud ja muud finantskulud;

3.3.4.3. eraldised kahjumi või võimalike tulevaste kohustuste katmiseks;

3.3.4.4. valuutakursi muutuste kahjum;

3.3.4.5. kinnisasja ostmise kulu;

3.3.4.6. kulud, mis kaetakse muudest allikatest;

3.3.4.7. trahvid, rahalised karistused ja kohtuvaidluste kulud;

3.3.4.8. ülemäärased või põhjendamatud kulud.

3.3.5. Kulud on abikõlblikud alates Projekti abikõlblikkuse perioodi alguskuupäevast kuni

Projekti abikõlblikkuse perioodi lõppkuupäevani. Kulud loetakse tekkinuks, kui kulu

aluseks olev arve on esitatud, tasutud ning töö tehakse, kaup saadakse kätte või teenus

osutatakse Projekti abikõlblikkuse perioodil. Erandina võib kulud lugeda abikõlblikeks,

kui arve on esitatud abikõlblikkuse perioodi viimasel kuul ning tasutud 30

kalendripäeva jooksul abikõlblikkuse perioodi lõppkuupäevast ja kulude tekkimise

aluseks olevad tegevused toimusid Projekti abikõlblikkuse perioodil.

3.3.6 Kõik abikõlblikud otsekulud peavad olema läbipaistvad ja dokumentaalselt tõendatud

vastavate kuludokumentidega ning olema tasutud Projekti elluviija ja/või partneri

pangakontolt.

4. PROGRAMMIOPERAATORI JA PROGRAMMI ELLUVIIJA ÕIGUSED JA

KOHUSTUSED NING TOETUSE TAGASINÕUDMINE

4.1. Programmi elluviija on õigustatud:

4.1.1. teostama igal ajaperioodil tööpäeviti kohapealset kontrolli ja/või auditit toetuse ja/või

kaasfinantseeringu kasutamist kajastavate kulu- ja maksedokumentide ja teostatud

tööde osas;

4.1.2. kontrollima toetuse ning kaasfinantseeringu kasutamist;

4.1.3. kontrollima Projekti elluviija ja/või partneri(te) tegevust Lepingust tulenevate

kohustuste täitmisel;

4.1.4. nõudma Projekti tegevuste ja kulude kohta mistahes täiendavate andmete ja

dokumentide esitamist.

4.2. Programmioperaator on õigustatud:

4.2.1. keelduma Lepingu muutmisest juhul, kui soovitav muudatus mõjutab oluliselt Projekti

eesmärke ja mõju;

7

4.2.2. ütlema Lepingu üles ja/või lõpetama toetuse väljamaksmise ning nõudma toetuse osalist

või täielikku tagastamist, kui esineb vähemalt üks järgmistest asjaoludest:

4.2.2.1. ilmneb asjaolu, mille korral taotlust ei oleks programmi eesmärkidega vastavaks

tunnistatud;

4.2.2.2. Projekti elluviija ja/või partner rikuvad Lepingust tulenevat kohustust, mh

kasutavad toetust mitteabikõlblike kulude hüvitamiseks, ei kasuta toetust ettenähtud

tingimustel või ei järgi Projekti elluviimise tähtaegu;

4.2.2.3. Projekti elluviija ja/või partner rikuvad neile seadusest tulenevat kohustust;

4.2.2.4. Projekti elluviija avaldust Lepingu muutmise kohta ei rahuldata ja Projekti elluviijal

ei ole toetuse kasutamist ettenähtud tingimustel võimalik jätkata;

4.2.2.5. Norra välisministeerium nõuab toetuse tagasi;

4.2.2.6. partnerlusleping öeldakse üles, mistõttu ei ole võimalik Projekti esitatud mahus ellu

viia;

4.2.2.7. Projekti elluviija esitab avalduse toetusest loobumise kohta.

4.2.3. otsustama Projekti programmi eesmärkidega vastavaks tunnistamise otsuse kehtetuks

tunnistamise ja Lepingu lõpetamise 20 tööpäeva jooksul alates toetusest loobumise

avalduse saamisest.

4.3. Programmi elluviija on kohustatud:

4.3.1. kontrollima Projekti vahefinantsaruandeid ning koheselt informeerima

Programmioperaatorit võimalikest rikkumistest;

4.3.2. heaks kiitma või tagasi lükkama Projekti elluviija esitatud aruanded ja maksetaotluse

hiljemalt 20 tööpäeva jooksul nende laekumisest ning viivitamata teavitama Projekti

elluviijat aruannete ja väljamakse taotluse heakskiitmise või tagasi lükkamise otsusest;

4.3.3. hoidma konfidentsiaalsena informatsiooni, mis on teatavaks saanud toetuse taotluse

menetlemise käigus, v.a õigusaktides sätestatud juhtudel, kui on lubatud

konfidentsiaalsuse kohustusest kõrvale kalduda.

4.4. Programmioperaator on kohustatud:

4.4.1. esitama Riigi Tugiteenuste Keskusele taotluse toetuse väljamaksmiseks Projekti

elluviijale peale Projekti vastava perioodi aruande ja maksetaotluse kinnitamist

Programmi elluviija poolt, kui Programmioperaatoril ja Programmi elluviijal ei ole

pretensioone finantseeritavate tegevuste ning tehtud kulude asjakohasuse kohta;

4.4.2. teavitama Projekti elluviijat toetuse kasutamist reguleerivates dokumentides tehtud

muudatustest;

4.4.3. tegema pärast Lepingu sõlmimist oma veebilehel kättesaadavaks järgmise

informatsiooni: Projekti elluviija ja partneri(te) nimi, Projekti nimi, Projekti kestus,

toetuse summa, Projekti kogumaht;

4.4.4. hoidma konfidentsiaalsena informatsiooni, mis on teatavaks saanud toetuse taotluse

menetlemise käigus, v.a õigusaktides sätestatud juhtudel, kui on lubatud

konfidentsiaalsuse kohustusest kõrvale kalduda.

8

4.5. Toetuse tagasinõudmisel:

4.5.1. lähtutakse perioodi 2014–2020 struktuuritoetuse seaduse §-s 45 sätestatud

finantskorrektsiooni alustest ja Vabariigi Valitsuse 1. septembri 2014. a määrusest

nr 143 „Perioodi 2014–2020 struktuuritoetusest hüvitatavate kulude abikõlblikuks

lugemise, toetuse maksmise ning finantskorrektsioonide tegemise tingimused ja kord”;

4.5.2. tuleb Projekti elluviijal tagasinõutav toetus tagasi maksta 60 päeva jooksul pärast

toetuse tagasinõudmise otsuse teatavaks tegemist.

5. LÕPPSÄTTED

5.1. Leping jõustub selle allkirjastamisest ja kehtib kuni Poolte poolt kõigi oma kohustuste

nõuetekohase täitmiseni.

5.2. Lepingut võib muuta Poolte kirjalikul kokkuleppel. Muudatused jõustuvad pärast

allakirjutamist mõlema Poole poolt või Poolte poolt määratud tähtajal.

5.3. Kõik Lepingust tulenevad erimeelsused püütakse lahendada läbirääkimiste teel. Juhul, kui

läbirääkimised ei anna tulemusi, lahendatakse vaidlus õigusaktidega sätestatud korras.

5.4. Lepingus reguleerimata küsimustes juhinduvad Pooled Eesti Vabariigis kehtivatest

õigusaktidest ning Lepingu punktis 2 nimetatud Lepingu dokumentidest vastavalt nende

pädevusjärjekorrale.

POOLTE REKVISIIDID JA ALLKIRJAD:

Programmioperaator:

Majandus- ja Kommunikatsiooniministeerium

Registrikood 70003158

Suur-Ameerika 1

10122 Tallinn

Telefon 625 6342

E-post [email protected]

______________________

Raul Siem

Programmi elluviija:

Ettevõtluse Arendamise Sihtasutus

Registrikood 90006006

Lasnamäe 2

11412 Tallinn

Telefon 627 9700

E-post [email protected]

______________________

Sigrid Harjo

9

Projekti elluviija:

Sotsiaalministeerium

Registrikood 70001952

Suur-Ameerika 1

10122 Tallinn

Telefon 626 9301

E-post [email protected]

______________________

Marika Priske

Lisa_1_CC_Decision_Health_Sense_15012021.asice

Digiallkirjad

Allkirjade kehtivust ei ole kontrollitud.

TANEL TOMSON PNOEE-37608070320 2021-01-15 15:35:44

Decision_on_PDP_Health_Sense.docx

Decision of the Cooperation Committee of programme “Green ICT” regarding the appraisal of the predefined project “Health Sense”

Date: 15.01.2021

Cooperation Committee members:
Ms Anu Kull, Ministry of Economic Affairs and Communications
Ms Keit Kaadu, Ministry of Economic Affairs and Communications
Mr Magnar Ødelien, Innovation Norway
Ms Sille Kraam, Ministry of Economic Affairs and Communications
Mr Tanel Tomson, Ministry of Economic Affairs and Communications

Background
According to condition set in Annex I of the Programme Agreement there is an obligation of the Programme Operator to carry out an external and independent appraisal of the predefined project, in order to verify its quality and contribution to the objectives of the Programme as well as compliance with EU and national legislation.
Estonian Ministry of Economic Affairs as Programme Operator has asked Information System Authority and Data Protection Inspectorate to go through the description and budget of the predefined Project “Health Sense” in order to assess the suitability of the project with set requirements and give their independent opinion on planned project.
Information System Authority has come to the following conclusion:
Based on detailed project description and supplementary communication with the leading Project partner (Health and Welfare Information Systems Center) we find that the Project suites well with the intent and provisions of the Programme.
Project plan is prepared well. Several other completed and on-going development projects by Health and Welfare Information Systems Center create supportive context for the Project.
Project would be a significant advancement in Estonian digital economy.
In conclusion, the Project is of high quality and, in our opinion, contributes well to the Programme outcomes. Project promoter addresses also very important data protection concerns adequately in the project plan.
Data Protection Inspectorate has become to the following conclusion:
Until now, the main problem in practice has been the need to combine data from different datasets based on a unique identifier that distinguishes people from each other– the personal identification code. As a result, in many cases, data is personalised for research. It is true that the release of personalised data requires prior authorisation by the Ethics Committee or the Data Protection Inspectorate, but such permission does not mitigate the risks involved in such release. It is essentially impossible to verify the subsequent fate of the personal data issued once. Therefore, any technological solution that better ensures the protection of personal data is to be welcomed. Health Sense is creating a technological solution that allows research with previously pseudonymised data. We welcome that the state is increasing its capacity to bring data into a pseudonymous form before releasing it for research. We expect that this should reduce the need to issue a data in personalised manner in future.
In conclusion, however, the compliance of the Health Sense project with data protection requirements depends on how the project is actually realised, so it is not possible to provide a forward-looking abstract statement. However, in the light of the description of the project and looking at the parties involved and their expected knowledge, we expect that project promoter respects all the data protection requirements.

Decision of the Cooperation Committee
Programme Operator has sent both independent conclusions and proposal to finance the pre-defined project “Health Sense” to members of the Cooperation Committee on 08.01.2021. As there were, no objections sent by 14.01.2021, Cooperation Committee has made the following decision:

Relying on the conclusions of two independent experts we decide to finance the pre-defined project “Health Sense” in amount of 2 000 000 euros as part of the programme EE-Innovation (“Green ICT”). Estonian Ministry of Economic Affairs and Communications (Programme Operator) will conclude a trilateral project contract with Enterprise Estonia (Implementing Agency) and Ministry of Social Affairs (Project Promoter) to agree all the specific terms for using the grant and implementing the pre-defined project “Health Sense”.

Final version of project description and budget are enclosed.

Minutes taken by
Tanel Tomson

EE-Innovation - PDP 2 Health Sense Project_application.docx

Project title:
Health Sense
Project Promoter:
Estonian Ministry of Social Affairs
Project Partner(s):
Health and Welfare Information Systems Center, Tallinn University of Technology, University of Tartu
Donor project partner(s):
Helse West IKT; Western Norway University of Applied Sciences
Total maximum eligible project cost:
2 000 000€
Project grant rate:
100%
Project grant amount:
2 000 000€
Estimated duration:
24 months

a) Project summary
The goal of the predefined project Health Sense is to develop a secure data storage, integration, access and analysis toolkit in order to provide large, complex and detailed sets of health and lifecycle data for the public sector, private sector and R&D institutions. The ultimate aim of the project is to raise the availability of health and lifecycle data in order to enhance the creation of new products, services and solutions by the private sector, novel interventions by the public sector and relevant scientific knowledge by the R&D communities in order to raise life expectancy and prolong healthy life years of people. It is accounted for, that while the user community is likely to broaden even further in the future, then this data is delicate, which means privacy and security of developed/procured components is key. However in addition to technical security, compliance to strict data protection regulations is crucial as well. Thus, a key activity stream will aim to develop data collection procedures, tools and analyse regulations that meet limitations and responsibilities described in the General Data Protection Regulation1 (GDPR) to ensure usability of developed ICT components and thus ensure project success.

Health Sense is a virtual environment used to collect health, health cycle and lifestyle data for research and service development purposes. In addition, it also provides a toolbox that enables the creation of data analysis-based solutions for prolonging a healthy human life. As the data handled in the environment is sensitive, the tools for safe collection, storage, access and processing of data are an essential part of the provided toolbox.

b) Project background and justification
Estonian governmental information system today has sufficiently good e-ability to collect and handle personal data in different areas including healthcare, social care and labor area that are managed by Ministry of Social Affairs. Mostly these abilities today are used on an operational level to provide services for individuals, and for reporting and simple analyses. The better use of data, to provide the steering process with predictive and calculated supporting data, is planned but not yet implemented. Today a couple of domain-based separated data warehouses are used, and data relations between different areas are built, but only on a data mart level. This leads to limited possibilities in data analysis and AI development.
Today many different countries have the same problem – services are being provided and data is being collected, but separately and by areas with very simple loop back to steering process. Even when the data collected by different areas is gathered to the same environment, the data from different sources is connected on a person level and no additional relations are calculated nor defined. In many circumstances, legal constraints prevent interconnecting person level data.
Estonia is small and dynamic enough to build data integration, analysis models, and solutions to experiment with data warehouse environment architecture and development tools. We have all the necessary electronic data sources for supporting this process. Furthermore, we have years of experience in developing forward-thinking digital solutions and in simultaneously building/updating our regulatory framework for these solutions to be implemented. Estonia, being the near perfect testbed for spearheading new e-governance initiatives, can provide here great value by developing models and solutions, which can later be expanded further to larger data volumes in larger countries, Norway being one of the main considerations.
It is paramount to find committed partners, that are interested in projects of this kind as well as who comply with ethics and the principles of data security. There are several interested groups in the public sector, R&D institutions and private sector. The Department of Data Analysis has been set up under the Ministry of Social Affairs, however the need for health and lifecycle data continuously exists in other public sector institutions in the health and social domain (e.g. Health Insurance Fund, Health Development Institute, Estonian Health Board, Social Insurance Board, Unemployment Insurance Fund) and other public sector domains as well (e.g. Ministry of Defense, Defense Resources Agency, Ministry of Interior, Ministry of Education and Research etc). R&D institutions (e.g. University of Tartu and Tallinn University of Technology and Technology Competence Centers) are interested in using humans’ lifecycle data in their research, development and teaching processes, in cooperation with the governmental authorities. Various lifecycle and health data interested communities (e.g. Estonian HealthTech Cluster, Open Knowledge Estonia) are set up so that they connect individuals, research organizations, companies and startups. In addition, in recent years international interest by global (multi-national) companies (mainly pharmaceuticals and health technology) has grown exponentially.
All these groups are interested in having access to person’s lifecycle data. Some of them produce human lifecycle data, and through that expand the variety of data collected. Due to the high level of IT coverage in Estonia, many international companies have become interested in using health and lifecycle data in their R&D efforts. This can provide value as additional resources to the project.
Implementing the modern methods of person’s lifecycle-based data collecting, analysis and AI tools will lead to a longer and healthier life and reducing costs per unit in health- and social care. Thus, supporting the goal of the welfare technologies concept – staying independent in activities of daily living while receiving tailored support from various care services when needed.
Health Sense is a central (root) project for the redevelopment of data utilization in health, work and social care area, where the polices and services are intertwined and thus should be combined to provide maximum effectiveness and cost-efficiency. The latter is currently hindered by the scatteredness of data in these areas which leads to deficiencies in accessing and utilizing data for revising and building services. Thus, the toolkit developed through Health Sense would enable to modify, create and provide invisible and/or preventive services to citizens based on evidence gather through complex data analysis/findings. The project will be implemented as a predefined project because it requires the coordination between several public and private actors, many of which have very specific knowledge in the project area. Without the successful implementation of this project today, the push for combined evidence and data-led improvement of human social and health wellbeing, will be delayed for years.

c) Objective, expected outcome(s) and list of outputs
Project activity streams:
1.1. Project management
1.2. Data collecting environment
1.3. Data storage with pseudonymization and obfuscation tools
1.4. Warehouse data structures and ETL process
1.5. Data Analysis and visualization environment for third parties (e.g. private sector, R&D institutions)
1.6. Building data flows in cooperation with third parties (e.g. private sector, R&D institutions)
1.7. Analysis of legal regulations to foster the results of the project
For more detailed activities see timetable/milestone plan (e). For budget overview see sheet accompanied with this document.
Expected outputs:
• data collection environment from different sources (governmental and non-governmental)
• data pseudonymization, obfuscation and long text extraction tools
• partly encrypted data storage with encryption/decryption tools and methodology
• data flows from runtime information system to data warehouse (built on needs of third parties). Illustrated with more detail in Appendix 2 and 3.
• user rights and consent management system
• data analysis environment for third parties
• Analysis of legal regulations to ensure project outcomes
• data warehouse environment for Ministry of Social Affairs and other governmental institutions (for reporting and analysis purposes)
Expected outcomes:
• to create a data management platform for developing innovative solutions for healthcare and welfare service providers to develop and experiment new innovative products and services;
• to encourage the emergence of new health, welfare and lifestyle businesses and data driven business models;
• to create a launch pad for new healthcare and welfare services for their emergence to the market in cooperation with SMEs and start-ups;
• to promote scientific thinking and provide new inputs for research, development and innovation in SMEs and start-ups in the delivery of health and welfare services and educate highly skilled workforce in cooperation with universities.

Expected project result
Indicator
Unit of measurement
Source of verification
Frequency of reporting
Baseline value
Baseline year
Target value
Health Sense data management platform developed and operating
Data analysis procedures/tools in place and documented
Binary
Documentation available on HWISC website, software hosted at HWISC or state cloud infrastructure
Semi-annually
No
2018
Yes

Data collection and publishing procedures/tools in place and documented
Binary
Documentation available on HWISC website, software hosted at HWISC or state cloud infrastructure
Semi-annually
No
2018
Yes

Data collection, and publishing environment architecture and data analysis environment architecture developed and published
Binary
Documentation available on HWISC website, software hosted at HWISC or state cloud infrastructure
Semi-annually
No
2018
Yes

Number of data mining/Artificial Intelligence pilot projects successfully finished
Number
Documentation outlining projects and results available on HWISC website
Semi-annually
0
N/A
3

Number of professional staff trained
Number
Attendance sheets
Semi-annually
0
N/A
10
Project sustainability
All results created during the project will be maintained by Health and Welfare Information Systems Centre and Ministry of Social Affairs. All software created during the project will be hosted and maintained by Health and Welfare Information Systems Centre. The necessary resources to maintain and host results will be applied from the annual state budget of Estonia.
Intellectual property
Unless stipulated otherwise in the agreements between project promoter and project partners, intellectual property rights of the results of the project shall be owned by the party generating it. When results are generated jointly, it shall be jointly owned, unless the parties in question agree on a different solution. The method of defining joint ownership shall be based on their contributing efforts towards the result in shares proportionate to their scope of work/budget for that result.
After completion of the project, project promoter shall have the non-exclusive, royalty-free right to use, modify, copy, transfer or make derivative results of the project. The rights of the project promoter shall not be limited with regard to certain rights or to the purpose, term, territory, extent, manner or means of using the results of the project.

d) Information on the project promoter and project partner(s)

Ministry of Social Affairs is a governmental institution that operates in the field of social security. For ministry have been set five strategic objectives - ensure people's economic prosperity and their good work, ensure people's social coping and development, support the well-being of children and families, promote people's mutual care, equal opportunities and gender equality, and ensure people's long and high-quality life. Ministry of Social Affairs emerges objectives through compiling development plans for the fields being under control of ministry, as well as organization-based development plans.

Ministry of Social Affairs as project promoter, will ensure seamless project coordination.

Health and Welfare Information Systems Centre (HWISC) is info technology competence centre of Ministry of Social Affairs. HWISC is involved in the development, and management of ICT services in the health, social and labour fields within the area of government of the Ministry of Social Affairs. HWISC is a representative of the Ministry of Social Affairs in the „Health Sense“ project as the project manager.

HWISC will take upon the leading role in most of the project activities including procuring the necessary licensed software and hosting as well as designing the technical architecture of components and maintaining the solutions developed during Health Sense project. HWISC will assist in project coordination and in organising meetings as well as in analysis of legal regulations to ensure the success of the project.

Tallinn University of Technology (TalTech), the second largest university in Estonia, is international university teaching the knowledge and skills necessary for today’s international and competitive marketplace. TalTech is the top centre of science in Estonia. With strong emphasis on internationalization, TalTech has a strong multicultural student body, many international professors (11% foreign staff members), great cooperation with the world's top universities (e.g. Stanford, Technische Universität München, Del University of Technology and KTH Royal Institute of Technology in Europe) and with international companies (e.g., Microsoft, ABB, IBM. etc.). There are over 30 fully accredited international degree programmes (4 Bachelor programmes, 18 Master programmes and 10 PhD programmes) that are available fully in English.

TalTech will develop the appropriate model for digital health care data that could be used for data collection and storage in new generation Estonian Health Information System with the feasibility to implement the same model in other large scale Electronic Health Records (EHR). TalTech will develop the data model for digital medical data capture and storage to achieve semantic interoperability and develop universal continuity of care process standard.

University of Tartu (UT) is Estonia’s leading centre of research and training. It preserves the culture of the Estonian people and spearheads the country's reputation in research and provision of higher education. UT belongs to the top 1.2% of world's best universities.

As Estonia's national university, UT stresses the importance of international co-operation and partnerships with reputable research universities all over the world. The robust research potential of the university is evidenced by the fact that the University of Tartu has been invited to join the Coimbra Group, a prestigious club of renowned research universities.

UT includes four faculties. To support and develop the professional competence of its students and academic staff, the university has entered into bilateral co-operation agreements with 79 partner institutions in 31 countries.

University of Tartu will undertake the development of obfuscation toolkit.

Helse West IKT and Western Norway University of Applied Sciences are cooperating in building infrastructure for Intromat (https://intromat.no/), a project on introducing e-health in mental health. As Intromat requires designing of architecture, API-s, interfaces, pseudonimization/synonimization tools similar to the aim of Health Sense proposal, then it provides an ample opportunity to build synergies for both projects and future collaborations. Helse Vest IKT supplies all IT services to specialized health services in the counties of Rogaland, Hordaland and Sogn og Fjordane. Helse Vest customers include the public hospitals in Helse Vest, and several private health service providers in the region. Both Helse Vest IKT and Western Norway University of Applied Sciences have extensive experiences in designing and building software architecture.

Bilateral partners will provide consultations and best practice exchange on the following topics: warehousing architecture (e.g. component architecture, processes, relations with other warehouses, ETL principles and relations with data providers, standards), licensed components (database environment, ETL tools, analytical tools, data virtualization environments) and developed tools (synonymization tools, obfuscation tools, tools for long text extraction, data encryption/decryption). The bilateral partnership is crucial to ensure, that solutions developed in Estonia are state-of-the-art, internationally relevant and to gauge the potential for sharing components with Norwegian counterparts.

e) Timetable / Milestone plan *)
Extensive timetable is also visualized in a separate excel sheet
Activity (see attached timetable)
Activity stream
Leader
Timeframe (week from project starting date)
Project kick-off: 1st February 2021 (or as soon as possible)
Staffing the project team
1.1
Ministry of Social Affairs, Health and Welfare Information Systems Centre
1-6
A communication campaign and negotiations to select third party projects
1.1
Ministry of Social Affairs, Health and Welfare Information Systems Centre
1-63
Building overall system architecture
1.1 – 1.7
Health and Welfare Information Systems Centre (incl. project consortium*)
1-17
Analysis of legal regulations to ensure project success
1.7
Ministry of Social Affairs, Health and Welfare Information Systems Centre
5-102
Selecting and describing projects for develompent with third parties (private sector, R&D institutions)
1.1, 1.5-1.6
Health and Welfare Information Systems Centre
6-63
Building hardware architecture
1.1 – 1.7
Health and Welfare Information Systems Centre (incl. project consortium*)
4-9
Describing the criteria and restrictions for the Initial software components to be procured (ETL, DW database, NoSQL. Encryption/decryption, obfuscation, pseudonymisation, user permissions, virtualization etc.
1.1 – 1.7
Health and Welfare Information Systems Centre (incl. project consortium*)
1-14
Installation of initial hardware environment to infrastructure (probably Estonian state cloud “Riigipilv”)
1.1 - 1.6
Health and Welfare Information Systems Centre
8-11
Component selection, installation, and testing (Data collecting environment – ETL, BIW tools)
1.1, 1.4, 1.5
Health and Welfare Information Systems Centre
9-14
Building virtual working environment for third parties (closed environment for ETL, data marts, and analyse tools)
1.1, 1.5 - 1.6
Health and Welfare Information Systems Centre
12-19
Tenders of licenced tools
1.1 – 1.5
Health and Welfare Information Systems Centre
9-16
Completing initial environment (tender result installations) – central DW and data lake environment
1.1 – 1.5
Health and Welfare Information Systems Centre
17-21
Testing of environment
1.1 – 1.5
Health and Welfare Information Systems Centre
22-25
Description of initial environment, user manuals
1.1 – 1.5
Health and Welfare Information Systems Centre
9-25
Development/detailing of architecture
1.4
Project consortium*
5-75
Building BIW for IS-s
1.1 – 1.5
Health and Welfare Information Systems Centre
26-90
Development of logical data structures for DW
1.4
Tallinn University of Technology
2-64
Building data flows from BIW to central DW (ETL)
1.1 - 1.5
Health and Welfare Information Systems Centre
17-90
Development of user rights environment
1.1 – 1.5
Health and Welfare Information Systems Centre
22-34
API, REST etc. interfaces to access data
1.5
Health and Welfare Information Systems Centre
40-60
Third party projects testing the built toolkits and environment
1.1 - 1.6
Health and Welfare Information Systems Centre
26-102
Development of tools for collection of aggregated data
1.5 - 1.6
Health and Welfare Information Systems Centre
52-60
Environment for publishing data sets and statistical results (Open Data)
1.5
Health and Welfare Information Systems Centre
58-70
Development of pseudonymisation toolset
1.3
Health and Welfare Information Systems Centre
9-47
Development of obfuscation toolset
1.3
University of Tartu
9-97
Development of long text extraction tool
1.3
Health and Welfare Information Systems Centre
9-97
Meetings with partners (in Estonia)
1.1
Health and Welfare Information Systems Centre, Helse-West IKT, Western Norway University of Applied Sciences
6, 26, 46, 66, 96
Meetings with partners (in Norway)
1.1
Helse-West IKT, Western Norway University of Applied Sciences, Health and Welfare Information Systems Centre
16, 36, 56, 76, 86
Final descriptions of environment, user manuals
1.1
Health and Welfare Information Systems Centre
90-100
Promotion of project results
1.1
Health and Welfare Information Systems Centre
95-102
End of project: 31st January 2023
*Project consortium includes project promoter and all project partners (incl. donor partners).

f) Budget
Included in separate Excel sheet.

g) Overview of risks:
1. Legal frame obstacles to be followed in order to merge the different datasets.
a. Probability: Likely
b. Impact: Moderate
c. Response: Development of legal framework (incl. revising current regulations) will go in strong cooperation with the project team and project objectives. Revising regulations is part of not only major, but also minor e-government initiatives in Estonia. This is done regularly, routinely and simultaneously for all new governmental ICT-related initiatives as well as for minor modifications in existing digital infrastructure.
2. Breech of principles and laws regarding privacy, data safety and ethics.
a. Probability: Unlikely
b. Impact: Major
c. Response: Apply strict data security measures and methods throughout data storage and transfer infrastructure. Provide third-party access to only pseudonymized data only within the secure environment with access to analytical tools. Log all actions, which are done with the data in the secure environment. Allow only aggregated/analysed data to be exported out of the secure environment after logs have been checked for any suspicions. Additional principles regarding data privacy and trust to minimize this risk are detailed in Appendix 1.
3. Procurements for hardware and/or software fail or will be delayed that leads to difficulty to support requested activities.
a. Probability: Unlikely
b. Impact: Major
c. Response: Thorough preparation of the procurement documents
4. Lack of interest from SMEs and/or academia that leads to underuse of the Health sense capability.
a. Probability: Unlikely
b. Impact: Moderate
c. Response: Engage additional entities to promote the capability. Provide additional operational support from governmental agencies (e.g. datasets that can be used to solve specific problems).
5. Reputation damage to the project owner and project partners
a. Probability: Unlikely
b. Impact: Minor
c. Response: Carefully plan, prepare and staff the project before the official start to mitigate planning fallacies. Carefully select partners based on their showcased skills, interest, past commitments and adherence to data privacy and ethical principles.
6. Postponement of welfare technology open call projects
a. Probability: Likely
b. Impact: Moderate
c. Response: Include also projects/partners with reliable funding outside of welfare technology open call in addition to the open call projects.

APPENDIX 1 – Privacy and trust requirements and related responses

1. Requirements
a. The results of the project require the application of high-level data protection and sensitivity rules to prevent data misuse and privacy breaches.
b. All data processing activities must be verifiable at a later stage.
c. Data processing must take place on the basis of legislation.
d. Only deal with ethical and technically capable partners who can provide a secure data storage environment and trusted team.

2. Responses
a. Data storages are divided to two securely separated areas: data owner area and researchers area; personalized data can be stored only at the data owner area; at the researchers area data can be stored in pseudonymized and aggregated manner; pseudonymized and aggregated data can also be stored at the data owner area. (requirement a)
b. Data owner area is also divided to two separated areas: personalized data area and impersonalized data area. This allows better to separate users who need personal information from users who do not need them. (requirement a)
c. Access to the personal and pseudonymized data can only be done through secure environments using highest-level authorization tools (corresponding to EIDAS “high”). (requirement a)
d. Each dataset must be compiled using the different pseudonym for the same person. (requirement a)
e. Along with data pseudonymizing, obfuscation is always applied. (requirement a)
f. “Aggregated data” is in most cases the synonym of “open data”; however, this is only possible if a sufficient amount of data is aggregated on one line; the minimum number of aggregated rows must be defined for each data set (requirement a)
g. It is mandatory to create isolated sandbox-like environments where researchers can analyse (anonymized or aggregated) data; only aggregated (statistical) data can be extracted from these environments. (requirement a)
h. All activities with the data must be stored in logs; it is necessary to build a log analysis environment to detect misuse of data. (requirement b)
i. At the first stages of the project, it is necessary to find solutions for the creation of data processing activities in accordance with current legislation; at the same time, it is necessary to identify regulatory shortcomings that prevent data processing in the interests of individuals and initiate changes to these laws. (requirement c)
j. The background, intent and goals of all partners must be verified every time when data usage permission is granted; all data usage is monitored on the basis of log analysis; when the misuse of data is detected, the misusers accounts will be closed until the decision is made (requirement e)

APPENDIX 2 – Health Sense overall component architecture

APPENDIX 3 – Health Sense overall data flow chart

EE-Innovation - PDP 2 Health Sense budget.xlsx

Otsus_Health_Sense_15012021.docx

„Green ICT“ programmi koostöökomitee otsus, mis käsitleb eelnevalt kindlaks määratud projekti "Health Sense" hindamist

Kuupäev: 15.01.2021

Koostöökomitee liikmed:
Anu Kull, Majandus- ja Kommunikatsiooniministeerium
Keit Kaadu, Majandus- ja Kommunikatsiooniministeerium
Magnar Ødelien, Innovation Norway
Sille Kraam, Majandus- ja Kommunikatsiooniministeerium
Tanel Tomson, Majandus- ja Kommunikatsiooniministeerium

Taust
Programmilepingu I lisas sätestatud tingimuse kohaselt on programmioperaator kohustatud teostama eelnevalt kindlaks määratud projekti välise ja sõltumatu hindamise, et kontrollida programmi kvaliteeti ja panust programmi eesmärkide saavutamisse ning ELi ja siseriiklike õigusaktide järgimist.
Eesti Majandus- ja Kommunikatsiooniministeerium kui programmioperaator on palunud Riigi Infosüsteemi Ametil ja Andmekaitse Inspektsioonil tutvuda eelnevalt kindlaks määratud projekti "Health Sense" kirjelduse ja eelarvega, et hinnata projekti sobivust kehtestatud nõuetega ja anda oma sõltumatu hinnang planeeritud projekti kohta.
Riigi Infosüsteemi Amet jõudis järgmisele järeldusele:
Tuginedes projekti üksikasjalikule kirjeldusele ja täiendavale suhtlusele juhtiva projektipartneriga (Tervise- ja Heaolu Infosüsteemide Keskus), leiame, et projekt sobib hästi programmi eesmärkide ja sätetega.
Projektiplaan on hästi ette valmistatud. Mitmed teised lõpetatud ja käimasolevad arendusprojektid Tervise- ja Heaolu infosüsteemide Keskuse poolt loovad projektile toetava konteksti.
Projekt oleks Eesti digitaalmajanduses märkimisväärne edasiminek.
Kokkuvõttes on projekt kvaliteetne ja aitab meie arvates programmi tulemusi hästi saavutada. Projekti elluviija käsitleb projektikavas piisavalt ka väga olulisi andmekaitsega seotud probleeme.
Andmekaitse Inspektsioon jõudis järgmisele järeldusele:
Seni on praktikas olnud peamiseks probleemiks vajadus ühendada erinevatest andmestikest pärinevaid andmeid inimesi üksteisest eristava unikaalse identifikaatori – isikukoodi – alusel. Ning seetõttu väljastatakse paljudel juhtudel teadusuuringuteks andmeid isikustatult. On tõsi, et isikustatud andmete avaldamiseks on vaja eetikakomitee või Andmekaitse Inspektsiooni eelnevat luba, kuid selline luba ei leevenda sellise avaldamisega kaasnevaid riske. Sisuliselt on võimatu kontrollida kord väljastatud isikuandmete hilisemat saatust.
Seetõttu tuleb tervitada kõiki tehnoloogilisi lahendusi, mis tagavad isikuandmete kaitse paremini. Health Sense loob tehnoloogilise lahenduse, mis võimaldab varem pseudonüümitud andmetega teadusuuringuid. Meil on hea meel, et riik suurendab oma suutlikkust viia andmeid pseudonüümitud kujule enne nende avaldamist teadusuuringuteks. Eeldame, et see peaks edaspidi vähendama vajadust väljastada isikustatud andmeid.
Kokkuvõttes sõltub Health Sense projekti vastavus andmekaitse nõuetele siiski sellest, kuidas projekt tegelikult realiseeritakse, mistõttu sellekohast etteulatuvat abstraktset kinnitust ei ole võimalik anda. Küll aga võib öelda, et projekti kirjeldusest lähtuvalt ning vaadates kaasatud osapooli ning nende eeldatavaid teadmisi, võib arvata, et andmekaitse nõudeid kavatsetakse järgida.

Koostöökomitee otsus
Programmioperaator on saatnud koostöökomitee liikmetele 08.01.2021 mõlema eksperdi antud sõltumatud hinnangud ning teinud ettepaneku rahastada eelnevalt kindlaks määratud projekti "Health Sense“. Kuna ükski koostöökomitee liige ei väljendanud vastuseisu ettepanekule, otsustas koostöökomitee:

Tuginedes kahe sõltumatu eksperdi järeldustele, otsustame rahastada eelnevalt kindlaks määratud projekti "Health Sense" summas 2 000 000 eurot programmi "EE-Innovation" (“Green ICT”) raames. Majandus- ja Kommunikatsiooniministeerium (programmioperaator) sõlmib EASiga (rakendusasutus) ja Sotsiaalministeeriumiga (projekti elluviija) kolmepoolse projektilepingu, et kokku leppida eelnevalt kindlaks määratud projekti "Health Sense" rakendamise tingimused.

Projekti kirjelduse ja eelarve lõplik versioon on lisatud.

Protokollis
Tanel Tomson

Lisa_2_EE-Innovation_PDP_ 2_Health_Sense_b....pdf

5.1 Template for the PDP cost (budget)

Programme:

Project title:

Project Promoter:

Total project cost:

Project grant rate:

Project duration:

Unit Number of units

(a)

Unit price (€)

(b)

Total cost (€)

(a) x (b) Comments/additional information

Project coordinator month 24 1000 24000 FTE: 0,33 Ministry of Social Affairs (MoSA)

Project manager month 24 4700 112800 FTE: 1 Health and Welfare Information Center (HWISC)

System Architect month 24 4500 108000 FTE: 1 HWISC

Data Analyst month 24 4000 96000 FTE: 1 HWISC

Business trips trips 10 3640,00 36400 Will be carried out together with donor partners. MoSA

Meetings arrangement (rent and other costs) day 30 500 15000 Will be carried out together with donor partners. MoSA

392200

Hardware rent and management or procurement month 24 460 11040 HWISC

Software installation and administration month 24 1130 27120 FTE: 0,33 HWISC

Staff Training day 15 700 10500 HWISC

48660 HWISC

Servers Server 3 11000 33000 HWISC

Software installation / administration month 24 1130 27120 FTE: 0,33 HWISC

Warehouse DB licenses Tbait per 2

year 4 26926,75 107707 HWISC

Staff training day 15 700 10500 HWISC

Data obfuscation tool development partner 1 395009 395009 Will be carried out by project partner University of Tartu

Data extraction and systematization tool development contract 1-2 126000 126000 HWISC

Pseudonymization management tool development contract 1-2 100000 100000 HWISC

799336

Development of data warehouse data structures and

terminology partner 1 105550 105550

Will be carried out by project partner Tallinn University of

Technology (TalTech)

Development of ETL processes contract 1-4 162626 162626 HWISC

268176

Hardware rent and management or procurement month 24 460 11040 HWISC

Software installation /administration month 24 1130 27120 FTE: 0,33 HWISC

Analysis and publication tools/environment licenses year 2 51058 102116 HWISC

Staff training day 70 700 49000 HWISC

189276

Data Analyst/Data administrator month 12 4000 48000 FTE: 1 (project months 13-24) HWISC

48000

Legal employee month 24 3880 93120 FTE: 1 HWISC

93120

1838768

161232 Flat rate of 15% of all staff costs assigned to the projects.

2000000

0

392200

1446568

Cost of staff assigned to the project - Reg. Art. 8.3.1.a

Green ICT

Health Sense

Estonian Ministry of Social Affairs

€ 2 000 000

100%

24 months

Type of expenditure

1. DIRECT EXPENDITURES - Reg. Art. 8.2 & Art. 8.3

1.1 Project management

Cost of staff assigned to the project - Reg. Art. 8.3.1.a

1.3. Data storage with pseudonymization and obfuscation tools

Cost of staff assigned to the project - Reg. Art. 8.3.1.a

Travel and subsistence allowances for staff - Reg. Art. 8.3.1.b

Costs entailed by other contracts awarded by PP for the purpose of

carrying out the project - Reg. Art. 8.3.1.f

Total 1.1:

1.2. Data collecting environment

Costs entailed by other contracts awarded by PP for the purpose of

carrying out the project - Reg. Art. 8.3.1.f

Cost of staff assigned to the project - Reg. Art. 8.3.1.a

Costs entailed by other contracts awarded by PP for the purpose of

carrying out the project - Reg. Art. 8.3.1.f

Total 1.2:

Costs entailed by other contracts awarded by PP for the purpose of

carrying out the project - Reg. Art. 8.3.1.f

Costs entailed by other contracts awarded by PP for the purpose of

carrying out the project - Reg. Art. 8.3.1.f

Cost of staff assigned to the project - Reg. Art. 8.3.1.a

Costs entailed by other contracts awarded by PP for the purpose of

carrying out the project - Reg. Art. 8.3.1.f

Costs entailed by other contracts awarded by PP for the purpose of

carrying out the project - Reg. Art. 8.3.1.f

Cost of staff assigned to the project - Reg. Art. 8.3.1.a

Costs entailed by other contracts awarded by PP for the purpose of

carrying out the project - Reg. Art. 8.3.1.f

Costs entailed by other contracts awarded by PP for the purpose of

carrying out the project - Reg. Art. 8.3.1.f

Total 1.3:

1.4. Warehouse data structures and ETL process

Cost of staff assigned to the project - Reg. Art. 8.3.1.a

Total 1.6:

Total 1.4:

1.5. Data Analysis and visualization environment for third parties (e.g. private sector, R&D institutions)

Cost of staff assigned to the project - Reg. Art. 8.3.1.a

Costs entailed by other contracts awarded by PP for the purpose of

carrying out the project - Reg. Art. 8.3.1.f

Costs entailed by other contracts awarded by PP for the purpose of

carrying out the project - Reg. Art. 8.3.1.f

Total 1.5:

1.6. Building data flows in cooperation with third parties (e.g. private sector, R&D institutions)

Cost of staff assigned to the project - Reg. Art. 8.3.1.a

1.7. Analysis of legal regulations to foster the results of the project

Cost of staff assigned to the project - Reg. Art. 8.3.1.a

Total 1.7:

Total 1:

Total output related cost (€):

2. INDIRECT COSTS - Reg. Art. 8.5

Total 2: Indirect costs in projects (overheads) - Art. 8.5.1.c

TOTAL PDP COST (1 + 2):

Total project management cost (€):

Lisa_2_EE-Innovation_PDP_2_Health Sense_Pr....pdf

Project title: Health Sense Project Promoter: Estonian Ministry of Social Affairs Project Partner(s): Health and Welfare Information

Systems Center, Tallinn University of Technology, University of Tartu

Donor project partner(s): Helse West IKT; Western Norway University of Applied Sciences

Total maximum eligible project cost: 2 000 000€

Project grant rate: 100%

Project grant amount: 2 000 000€

Estimated duration: 24 months

a) Project summary

The goal of the predefined project Health Sense is to develop a secure data storage, integration,

access and analysis toolkit in order to provide large, complex and detailed sets of health and

lifecycle data for the public sector, private sector and R&D institutions. The ultimate aim of the

project is to raise the availability of health and lifecycle data in order to enhance the creation of

new products, services and solutions by the private sector, novel interventions by the public

sector and relevant scientific knowledge by the R&D communities in order to raise life

expectancy and prolong healthy life years of people. It is accounted for, that while the user

community is likely to broaden even further in the future, then this data is delicate, which means

privacy and security of developed/procured components is key. However in addition to

technical security, compliance to strict data protection regulations is crucial as well. Thus, a

key activity stream will aim to develop data collection procedures, tools and analyse regulations

that meet limitations and responsibilities described in the General Data Protection Regulation1

(GDPR) to ensure usability of developed ICT components and thus ensure project success.

Health Sense is a virtual environment used to collect health, health cycle and lifestyle data for

research and service development purposes. In addition, it also provides a toolbox that enables

the creation of data analysis-based solutions for prolonging a healthy human life. As the data

handled in the environment is sensitive, the tools for safe collection, storage, access and

processing of data are an essential part of the provided toolbox.

b) Project background and justification

Estonian governmental information system today has sufficiently good e-ability to collect and

handle personal data in different areas including healthcare, social care and labor area that are

managed by Ministry of Social Affairs. Mostly these abilities today are used on an operational

level to provide services for individuals, and for reporting and simple analyses. The better use

of data, to provide the steering process with predictive and calculated supporting data, is

1 Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of

natural persons with regard to the processing of personal data and on the free movement of such data, and

repealing Directive 95/46/EC. OJ L 119, 4.5.2016, p. 1–88.

planned but not yet implemented. Today a couple of domain-based separated data warehouses

are used, and data relations between different areas are built, but only on a data mart level. This

leads to limited possibilities in data analysis and AI development.

Today many different countries have the same problem – services are being provided and data

is being collected, but separately and by areas with very simple loop back to steering process.

Even when the data collected by different areas is gathered to the same environment, the data

from different sources is connected on a person level and no additional relations are calculated

nor defined. In many circumstances, legal constraints prevent interconnecting person level data.

Estonia is small and dynamic enough to build data integration, analysis models, and solutions

to experiment with data warehouse environment architecture and development tools. We have

all the necessary electronic data sources for supporting this process. Furthermore, we have years

of experience in developing forward-thinking digital solutions and in simultaneously

building/updating our regulatory framework for these solutions to be implemented. Estonia,

being the near perfect testbed for spearheading new e-governance initiatives, can provide here

great value by developing models and solutions, which can later be expanded further to larger

data volumes in larger countries, Norway being one of the main considerations.

It is paramount to find committed partners, that are interested in projects of this kind as well as

who comply with ethics and the principles of data security. There are several interested groups

in the public sector, R&D institutions and private sector. The Department of Data Analysis has

been set up under the Ministry of Social Affairs, however the need for health and lifecycle data

continuously exists in other public sector institutions in the health and social domain (e.g.

Health Insurance Fund, Health Development Institute, Estonian Health Board, Social Insurance

Board, Unemployment Insurance Fund) and other public sector domains as well (e.g. Ministry

of Defense, Defense Resources Agency, Ministry of Interior, Ministry of Education and

Research etc). R&D institutions (e.g. University of Tartu and Tallinn University of Technology

and Technology Competence Centers) are interested in using humans’ lifecycle data in their

research, development and teaching processes, in cooperation with the governmental

authorities. Various lifecycle and health data interested communities (e.g. Estonian HealthTech

Cluster, Open Knowledge Estonia) are set up so that they connect individuals, research

organizations, companies and startups. In addition, in recent years international interest by

global (multi-national) companies (mainly pharmaceuticals and health technology) has grown

exponentially.

All these groups are interested in having access to person’s lifecycle data. Some of them

produce human lifecycle data, and through that expand the variety of data collected. Due to the

high level of IT coverage in Estonia, many international companies have become interested in

using health and lifecycle data in their R&D efforts. This can provide value as additional

resources to the project.

Implementing the modern methods of person’s lifecycle-based data collecting, analysis and AI

tools will lead to a longer and healthier life and reducing costs per unit in health- and social

care. Thus, supporting the goal of the welfare technologies concept – staying independent in

activities of daily living while receiving tailored support from various care services when

needed.

Health Sense is a central (root) project for the redevelopment of data utilization in health, work

and social care area, where the polices and services are intertwined and thus should be combined

to provide maximum effectiveness and cost-efficiency. The latter is currently hindered by the

scatteredness of data in these areas which leads to deficiencies in accessing and utilizing data

for revising and building services. Thus, the toolkit developed through Health Sense would

enable to modify, create and provide invisible and/or preventive services to citizens based on

evidence gather through complex data analysis/findings. The project will be implemented as a

predefined project because it requires the coordination between several public and private

actors, many of which have very specific knowledge in the project area. Without the successful

implementation of this project today, the push for combined evidence and data-led

improvement of human social and health wellbeing, will be delayed for years.

c) Objective, expected outcome(s) and list of outputs

Project activity streams:

1.1. Project management

1.2. Data collecting environment

1.3. Data storage with pseudonymization and obfuscation tools

1.4. Warehouse data structures and ETL process

1.5. Data Analysis and visualization environment for third parties (e.g. private sector, R&D

institutions)

1.6. Building data flows in cooperation with third parties (e.g. private sector, R&D institutions)

1.7. Analysis of legal regulations to foster the results of the project

For more detailed activities see timetable/milestone plan (e). For budget overview see sheet

accompanied with this document.

Expected outputs:

 data collection environment from different sources (governmental and non-governmental)

 data pseudonymization, obfuscation and long text extraction tools

 partly encrypted data storage with encryption/decryption tools and methodology

 data flows from runtime information system to data warehouse (built on needs of third

parties). Illustrated with more detail in Appendix 2 and 3.

 user rights and consent management system

 data analysis environment for third parties

 Analysis of legal regulations to ensure project outcomes

 data warehouse environment for Ministry of Social Affairs and other governmental

institutions (for reporting and analysis purposes)

Expected outcomes:

 to create a data management platform for developing innovative solutions for healthcare

and welfare service providers to develop and experiment new innovative products and

services;

 to encourage the emergence of new health, welfare and lifestyle businesses and data driven

business models;

 to create a launch pad for new healthcare and welfare services for their emergence to the

market in cooperation with SMEs and start-ups;

 to promote scientific thinking and provide new inputs for research, development and

innovation in SMEs and start-ups in the delivery of health and welfare services and educate

highly skilled workforce in cooperation with universities.

Expected

project

result

Indicator

Unit of

measure

ment

Source of

verification

Frequency

of reporting

Baseline

value

Baseline

year

Target

value

Health

Sense data

management

platform

developed

and

operating

Data analysis

procedures/too

ls in place and

documented

Binary

Documentation

available on

HWISC website,

software hosted

at HWISC or

state cloud

infrastructure

Semi-

annually No 2018 Yes

Data

collection and

publishing

procedures/too

ls in place and

documented

Binary

Documentation

available on

HWISC website,

software hosted

at HWISC or

state cloud

infrastructure

Semi-

annually No 2018 Yes

Data

collection, and

publishing

environment

architecture

and data

analysis

environment

architecture

developed and

published

Binary

Documentation

available on

HWISC website,

software hosted

at HWISC or

state cloud

infrastructure

Semi-

annually No 2018 Yes

Number of

data

mining/Artific

ial Intelligence

pilot projects

successfully

finished

Number

Documentation

outlining

projects and

results available

on HWISC

website

Semi-

annually 0 N/A 3

Number of

professional

staff trained

Number Attendance

sheets

Semi-

annually 0 N/A 10

Project sustainability

All results created during the project will be maintained by Health and Welfare Information

Systems Centre and Ministry of Social Affairs. All software created during the project will be

hosted and maintained by Health and Welfare Information Systems Centre. The necessary

resources to maintain and host results will be applied from the annual state budget of Estonia.

Intellectual property

Unless stipulated otherwise in the agreements between project promoter and project partners,

intellectual property rights of the results of the project shall be owned by the party generating

it. When results are generated jointly, it shall be jointly owned, unless the parties in question

agree on a different solution. The method of defining joint ownership shall be based on their

contributing efforts towards the result in shares proportionate to their scope of work/budget for

that result.

After completion of the project, project promoter shall have the non-exclusive, royalty-free

right to use, modify, copy, transfer or make derivative results of the project. The rights of the

project promoter shall not be limited with regard to certain rights or to the purpose, term,

territory, extent, manner or means of using the results of the project.

d) Information on the project promoter and project partner(s)

Ministry of Social Affairs is a governmental institution that operates in the field of

social security. For ministry have been set five strategic objectives - ensure people's

economic prosperity and their good work, ensure people's social coping and

development, support the well-being of children and families, promote people's

mutual care, equal opportunities and gender equality, and ensure people's long and

high-quality life. Ministry of Social Affairs emerges objectives through compiling

development plans for the fields being under control of ministry, as well as

organization-based development plans.

Ministry of Social Affairs as project promoter, will ensure seamless project

coordination.

Health and Welfare Information Systems Centre (HWISC) is info technology

competence centre of Ministry of Social Affairs. HWISC is involved in the

development, and management of ICT services in the health, social and labour fields

within the area of government of the Ministry of Social Affairs. HWISC is a

representative of the Ministry of Social Affairs in the „Health Sense“ project as the

project manager.

HWISC will take upon the leading role in most of the project activities including

procuring the necessary licensed software and hosting as well as designing the

technical architecture of components and maintaining the solutions developed

during Health Sense project. HWISC will assist in project coordination and in

organising meetings as well as in analysis of legal regulations to ensure the success

of the project.

Tallinn University of Technology (TalTech), the second largest university in

Estonia, is international university teaching the knowledge and skills necessary for

today’s international and competitive marketplace. TalTech is the top centre of

science in Estonia. With strong emphasis on internationalization, TalTech has a

strong multicultural student body, many international professors (11% foreign staff

members), great cooperation with the world's top universities (e.g. Stanford,

Technische Universität München, Del University of Technology and KTH Royal

Institute of Technology in Europe) and with international companies (e.g.,

Microsoft, ABB, IBM. etc.). There are over 30 fully accredited international degree

programmes (4 Bachelor programmes, 18 Master programmes and 10 PhD

programmes) that are available fully in English.

TalTech will develop the appropriate model for digital health care data that could

be used for data collection and storage in new generation Estonian Health

Information System with the feasibility to implement the same model in other large

scale Electronic Health Records (EHR). TalTech will develop the data model for

digital medical data capture and storage to achieve semantic interoperability and

develop universal continuity of care process standard.

University of Tartu (UT) is Estonia’s leading centre of research and training. It

preserves the culture of the Estonian people and spearheads the country's reputation

in research and provision of higher education. UT belongs to the top 1.2% of world's

best universities.

As Estonia's national university, UT stresses the importance of international co-

operation and partnerships with reputable research universities all over the world.

The robust research potential of the university is evidenced by the fact that the

University of Tartu has been invited to join the Coimbra Group, a prestigious club

of renowned research universities.

UT includes four faculties. To support and develop the professional competence of

its students and academic staff, the university has entered into bilateral co-operation

agreements with 79 partner institutions in 31 countries.

University of Tartu will undertake the development of obfuscation toolkit.

Helse West IKT and Western Norway University of Applied Sciences are

cooperating in building infrastructure for Intromat (https://intromat.no/), a project

on introducing e-health in mental health. As Intromat requires designing of

architecture, API-s, interfaces, pseudonimization/synonimization tools similar to the

aim of Health Sense proposal, then it provides an ample opportunity to build

synergies for both projects and future collaborations. Helse Vest IKT supplies all

IT services to specialized health services in the counties of Rogaland, Hordaland

and Sogn og Fjordane. Helse Vest customers include the public hospitals in Helse

Vest, and several private health service providers in the region. Both Helse Vest IKT

and Western Norway University of Applied Sciences have extensive experiences in

designing and building software architecture.

Bilateral partners will provide consultations and best practice exchange on the

following topics: warehousing architecture (e.g. component architecture, processes,

relations with other warehouses, ETL principles and relations with data providers,

standards), licensed components (database environment, ETL tools, analytical tools,

data virtualization environments) and developed tools (synonymization tools,

obfuscation tools, tools for long text extraction, data encryption/decryption). The

bilateral partnership is crucial to ensure, that solutions developed in Estonia are

state-of-the-art, internationally relevant and to gauge the potential for sharing

components with Norwegian counterparts.

e) Timetable / Milestone plan *)

Extensive timetable is also visualized in a separate excel sheet

Activity (see attached

timetable)

Activity

stream

Leader Timeframe

(week from

project

starting date)

Project kick-off: 1st February 2021 (or as soon as possible)

Staffing the project

team

1.1 Ministry of Social Affairs, Health and

Welfare Information Systems Centre

1-6

A communication

campaign and

negotiations to select

third party projects

1.1 Ministry of Social Affairs, Health and

Welfare Information Systems Centre

1-63

Building overall

system architecture

1.1 – 1.7 Health and Welfare Information

Systems Centre (incl. project

consortium*)

1-17

Analysis of legal

regulations to ensure

project success

1.7 Ministry of Social Affairs, Health and

Welfare Information Systems Centre

5-102

Selecting and

describing projects for

develompent with third

parties (private sector,

R&D institutions)

1.1, 1.5-1.6 Health and Welfare Information

Systems Centre

6-63

Building hardware

architecture

1.1 – 1.7 Health and Welfare Information

Systems Centre (incl. project

consortium*)

4-9

Describing the criteria

and restrictions for the

Initial software

components to be

procured (ETL, DW

database, NoSQL.

Encryption/decryption,

obfuscation,

pseudonymisation,

user permissions,

virtualization etc.

1.1 – 1.7 Health and Welfare Information

Systems Centre (incl. project

consortium*)

1-14

Installation of initial

hardware environment

to infrastructure

(probably Estonian

state cloud “Riigipilv”)

1.1 - 1.6 Health and Welfare Information

Systems Centre

8-11

Component selection,

installation, and testing

(Data collecting

environment – ETL,

BIW tools)

1.1, 1.4,

1.5

Health and Welfare Information

Systems Centre

9-14

Building virtual

working environment

for third parties (closed

environment for ETL,

data marts, and analyse

tools)

1.1, 1.5 -

1.6

Health and Welfare Information

Systems Centre

12-19

Tenders of licenced

tools

1.1 – 1.5 Health and Welfare Information

Systems Centre

9-16

Completing initial

environment (tender

result installations) –

1.1 – 1.5 Health and Welfare Information

Systems Centre

17-21

central DW and data

lake environment

Testing of

environment

1.1 – 1.5 Health and Welfare Information

Systems Centre

22-25

Description of initial

environment, user

manuals

1.1 – 1.5 Health and Welfare Information

Systems Centre

9-25

Development/detailing

of architecture

1.4 Project consortium* 5-75

Building BIW for IS-s 1.1 – 1.5 Health and Welfare Information

Systems Centre

26-90

Development of

logical data structures

for DW

1.4 Tallinn University of Technology 2-64

Building data flows

from BIW to central

DW (ETL)

1.1 - 1.5 Health and Welfare Information

Systems Centre

17-90

Development of user

rights environment

1.1 – 1.5 Health and Welfare Information

Systems Centre

22-34

API, REST etc.

interfaces to access

data

1.5 Health and Welfare Information

Systems Centre

40-60

Third party projects

testing the built

toolkits and

environment

1.1 - 1.6 Health and Welfare Information

Systems Centre

26-102

Development of tools

for collection of

aggregated data

1.5 - 1.6 Health and Welfare Information

Systems Centre

52-60

Environment for

publishing data sets

and statistical results

(Open Data)

1.5 Health and Welfare Information

Systems Centre

58-70

Development of

pseudonymisation

toolset

1.3 Health and Welfare Information

Systems Centre

9-47

Development of

obfuscation toolset

1.3 University of Tartu 9-97

Development of long

text extraction tool

1.3 Health and Welfare Information

Systems Centre

9-97

Meetings with partners

(in Estonia)

1.1 Health and Welfare Information

Systems Centre, Helse-West IKT,

Western Norway University of Applied

Sciences

6, 26, 46, 66,

96

Meetings with partners

(in Norway)

1.1 Helse-West IKT, Western Norway

University of Applied Sciences, Health

and Welfare Information Systems

Centre

16, 36, 56, 76,

86

Final descriptions of

environment, user

manuals

1.1 Health and Welfare Information

Systems Centre 90-100

Promotion of project

results

1.1 Health and Welfare Information

Systems Centre 95-102

End of project: 31st January 2023

*Project consortium includes project promoter and all project partners (incl. donor partners).

f) Budget

Included in separate Excel sheet.

g) Overview of risks:

1. Legal frame obstacles to be followed in order to merge the different datasets.

a. Probability: Likely

b. Impact: Moderate

c. Response: Development of legal framework (incl. revising current regulations)

will go in strong cooperation with the project team and project objectives.

Revising regulations is part of not only major, but also minor e-government

initiatives in Estonia. This is done regularly, routinely and simultaneously for

all new governmental ICT-related initiatives as well as for minor modifications

in existing digital infrastructure.

2. Breech of principles and laws regarding privacy, data safety and ethics.

a. Probability: Unlikely

b. Impact: Major

c. Response: Apply strict data security measures and methods throughout data

storage and transfer infrastructure. Provide third-party access to only

pseudonymized data only within the secure environment with access to

analytical tools. Log all actions, which are done with the data in the secure

environment. Allow only aggregated/analysed data to be exported out of the

secure environment after logs have been checked for any suspicions. Additional

principles regarding data privacy and trust to minimize this risk are detailed in

Appendix 1.

3. Procurements for hardware and/or software fail or will be delayed that leads to difficulty

to support requested activities.

a. Probability: Unlikely

b. Impact: Major

c. Response: Thorough preparation of the procurement documents

4. Lack of interest from SMEs and/or academia that leads to underuse of the Health sense

capability.

a. Probability: Unlikely

b. Impact: Moderate

c. Response: Engage additional entities to promote the capability. Provide

additional operational support from governmental agencies (e.g. datasets that

can be used to solve specific problems).

5. Reputation damage to the project owner and project partners

a. Probability: Unlikely

b. Impact: Minor

c. Response: Carefully plan, prepare and staff the project before the official start

to mitigate planning fallacies. Carefully select partners based on their showcased

skills, interest, past commitments and adherence to data privacy and ethical

principles.

6. Postponement of welfare technology open call projects

a. Probability: Likely

b. Impact: Moderate

c. Response: Include also projects/partners with reliable funding outside of welfare

technology open call in addition to the open call projects.

APPENDIX 1 – Privacy and trust requirements and related responses

1. Requirements

a. The results of the project require the application of high-level data protection and sensitivity

rules to prevent data misuse and privacy breaches.

b. All data processing activities must be verifiable at a later stage.

c. Data processing must take place on the basis of legislation.

d. Only deal with ethical and technically capable partners who can provide a secure data storage

environment and trusted team.

2. Responses

a. Data storages are divided to two securely separated areas: data owner area and researchers

area; personalized data can be stored only at the data owner area; at the researchers area data

can be stored in pseudonymized and aggregated manner; pseudonymized and aggregated

data can also be stored at the data owner area. (requirement a)

b. Data owner area is also divided to two separated areas: personalized data area and

impersonalized data area. This allows better to separate users who need personal information

from users who do not need them. (requirement a)

c. Access to the personal and pseudonymized data can only be done through secure

environments using highest-level authorization tools (corresponding to EIDAS “high”).

(requirement a)

d. Each dataset must be compiled using the different pseudonym for the same person.

(requirement a)

e. Along with data pseudonymizing, obfuscation is always applied. (requirement a)

f. “Aggregated data” is in most cases the synonym of “open data”; however, this is only

possible if a sufficient amount of data is aggregated on one line; the minimum number of

aggregated rows must be defined for each data set (requirement a)

g. It is mandatory to create isolated sandbox-like environments where researchers can analyse

(anonymized or aggregated) data; only aggregated (statistical) data can be extracted from

these environments. (requirement a)

h. All activities with the data must be stored in logs; it is necessary to build a log analysis

environment to detect misuse of data. (requirement b)

i. At the first stages of the project, it is necessary to find solutions for the creation of data

processing activities in accordance with current legislation; at the same time, it is necessary

to identify regulatory shortcomings that prevent data processing in the interests of

individuals and initiate changes to these laws. (requirement c)

j. The background, intent and goals of all partners must be verified every time when data usage

permission is granted; all data usage is monitored on the basis of log analysis; when the

misuse of data is detected, the misusers accounts will be closed until the decision is made

(requirement e)

APPENDIX 2 – Health Sense overall component architecture

APPENDIX 3 – Health Sense overall data flow chart

Dokumendiregister	Majandus- ja Kommunikatsiooniministeerium
Viit	24.4-6/17-0524/458
Registreeritud	22.01.2021
Sünkroonitud	24.03.2024
Liik	Leping
Funktsioon	24.4/S Väliskoostööprojektide koordineerimine
Sari	24.4-6/S Mitmepoolse / piiriülese koostöö dokumendid (Arhiiviväärtuslik)
Toimik	24.4-6/17-0524
Juurdepääsupiirang	Avalik
Juurdepääsupiirang
Adressaat
Saabumis/saatmisviis
Vastutaja	Tanel Tomson
Originaal	Ava uues aknas

Nimi	K.p.	Δ	Viit	Tüüp	Org	Osapooled
Taotlus	06.03.2024	19	8-7/624	Sissetulev kiri	mkm	Sotsiaalministeerium
Leping	02.08.2022	601	24.4-6/17-0524/4940	Leping	mkm
Leping	23.12.2021	823	24.4-6/17-0524/7735	Leping	mkm
Taotlus	15.11.2021	861	24.4-7/2021/6719-1	Sissetulev kiri	mkm	Sotsiaalministeerium

Failid

Digiallkirjad

Digiallkirjad

Seosed