Estonia solved data sharing 25 years ago, while Europe is still arguing
Sensitive data is scattered over thousands of siloes without any transparency on use or accountability for the organisations that control it.
Did you every ask yourself who has access to your medical records at any given moment? Whether your income was queried by a benefits agency? Or if your home address was forwarded by the municipality to a third party?
In the Netherlands, we have to trust privacy laws are followed.
In Estonia, you get a receipt of who accessed what, where and why.
One state, a thousand silos
Every government department built its own system. Tax authority, benefits agency, municipality, health services: each one a separate island, storing the same address, the same income data, the same family composition. Duplicated across thousands of databases. Nobody talks directly. When data needs to move, it travels via files, via email, via fax in the stragglers.
The result: you fill in the same form seventeen times. Your data is wrong in four systems simultaneously. And when it goes wrong, you spend six months on the phone proving you exist.
Every European country knows this problem. Estonia decided to fix it.
X-Road and the sealed envelope
Estonia started from scratch in the 1990s, after independence, with no legacy systems and the rare luxury of building with intent. Their answer was X-Road: a data exchange layer connecting every public authority's IT system to every other, with three guarantees built in. Interoperability, data integrity, and privacy by design.
The key insight was this: data does not have to be copied into one place. Access has to be controlled.
Under X-Road, your medical record stays in the health system. Your income data stays at the tax authority. The police can query it when they have a legal basis. The benefits agency can check it to validate a claim. Each query is logged, signed, and timestamped, and the record of who asked is one a citizen can go back and inspect.
That audit trail is your receipt.
Estonia saves over 1,345 working years annually just by eliminating redundant data entry and enabling instant, trusted access between systems. Not by centralising everything into one giant database. By building infrastructure for controlled, transparent access.
Most governments get this wrong. The instinct is to build a central repository: put all the data in one place, make it queryable. It sounds logical. It creates a single point of failure, a single point of trust, and a honeypot. One breach. One bad actor with admin rights. Everything gone.
The Estonian model keeps data at the source. The health system is the authority for health data. The tax authority is the authoritative source for financial records. What X-Road provides is the sealed envelope system: authenticated requests sent between systems, verifiable responses, every exchange logged so the citizen can inspect it.
Why the Netherlands has not copied this
The technology exists. The architecture is public. X-Road is open source. Finland uses it. Japan has studied it. So why has the Netherlands not built something equivalent?
The honest answer is three things at once:
40 years of legacy systems whose owners see sharing as a threat, not an opportunity;
governance so fragmented across ministries, municipalities, and semi-public bodies that nobody holds the mandate to build a shared envelope layer; and most critically, no one has built the audit trail.
Without cryptographic proof that a specific agency accessed a specific piece of data at a specific moment with a specific legal basis, you do not have accountability. You have a very fast fax machine.
The third one is the blocker people do not talk about. You can fix legacy incrementally. You can negotiate governance over time. But without the audit trail, you cannot give citizens what Estonia gives them. You are building the infrastructure without the receipt.
What's already starting
The Dutch tax authority has been exploring this for two years now. The idea behind real-time tax reporting is that transaction data flows between companies and the tax authority as it happens, not as a batch at month-end. Not monthly. Not quarterly. The moment a coffee is sold, the VAT on it is already reported. That requires an infrastructure layer where data is exchanged in real-time, where origin and integrity are cryptographically provable, and where both sides trust the same audit trail.
That's the layer we build at mintBlue, and it's X-Road logic applied to taxation. Still early, still a research track, but the architecture is the same: keep the data at the source, make every exchange provable, hand both sides a receipt.
The European Data Strategy, the Data Governance Act, the push toward data spaces in health, mobility, agriculture, and finance: all of these are attempts to build at scale what Estonia built for government. The architecture is understood. The political will is forming. What's missing is the organisation that holds the mandate and the courage to start before they can see the finish line.
Estonia started when nobody was watching, when digital government was a niche experiment, when most countries were still arguing about whether to digitise at all. They did not wait for consensus. They built the rails.
The citizen as controller is not a nice-to-have. When you can see who accessed your data, you can ask why. When every query leaves an auditable trace, government agencies become accountable for their data use in a way they have never been. Privacy stops being only a legal right you have to invoke and starts being enforced by the infrastructure itself, every access on the record by default.
That's the version that matters. Not the GDPR version, where you have the right to request a PDF of your data. The operational version: a live receipt, every time.
The question is not whether Europe builds this. It's who builds the rails before 2030, and whether the Netherlands is at the table or watching from the sidelines again.