TRACTATENBLAD VAN HET KONINKRIJK DER NEDERLANDEN 1 (2026) Nr. 1 A. TITEL Verdrag tussen het Koninkrijk der Nederlanden en de Republiek Estland inzake de uitwisseling en wederzijdse beveiliging van gerubriceerde gegevens (met Bijlage); Brussel, 16 maart 2026 Voor een overzicht van de verdragsgegevens, zie verdragsnummer 012702 in de Verdragenbank. B. TEKST Agreement between the Kingdom of the Netherlands and the Republic of Estonia concerning the exchange and mutual protection of classified information The Kingdom of the Netherlands and the Republic of Estonia, Hereinafter referred to as “the Parties”, Wishing to ensure the mutual protection of Classified Information, have, in the interests of national security, agreed upon the following. Article 1 Purpose The purpose of this Agreement is to ensure the protection of Classified Information exchanged between the Parties or between legal entities or individuals under their jurisdiction, or generated in the framework of a bilateral program under this Agreement. The Agreement sets out the security procedures and arrangements for such protection. Article 2 Definitions For the purpose of this Agreement:

a) “Classified Contract” means a contract, including any pre-contractual negotiations, to be entered into by one of the Parties or a Contractor under its jurisdiction with a Contractor under the jurisdiction of the other Party for the supply of goods, execution of works or provision of services, the performance of which requires or involves access or potential access to or the generation of Classified Information.

b) “Classified Information” means any information, regardless of its form or nature, or objects or any parts thereof designated by a security classification by one of the Parties, the unauthorised disclosure or loss of which could cause varying degrees of harm to the interests of one or both of the Parties.

c) “Competent Security Authority” means the government authority in a Party responsible for the implementation and supervision of this Agreement. The Competent Security Authority may delegate part of its responsibilities to a delegated competent security authority.

d) “Contractor” means any individual or legal entity with the capacity to enter into contracts.

e) “Facility Security Clearance” means the positive determination by a Party that a facility has appropriate security measures in place for access to and handling of Classified Information up to and including a specified security classification level, in accordance with national laws and regulations.

f) “Need to Know” means the verified requirement for an individual or a legal entity to access, have knowledge of or possess Classified Information in connection with their official duties and for the performance of a specific task.

g) “Originating Party” means the Party under whose authority Classified Information has been generated under this Agreement.

h) “Personnel Security Clearance” means the positive determination by a Party that an individual has been security cleared to access and handle Classified Information up to and including a specified classification level, in accordance with its national laws and regulations.

i) “Providing Party” means the Party or Contractor under its jurisdiction, which provides Classified Information to the Receiving Party under this Agreement.

j) “Receiving Party” means the Party or Contractor under its jurisdiction, which receives Classified Information from the Providing Party under this Agreement.

k) “Security Classification Guide” means a document associated with a Classified Contract that identifies each part of that Classified Contract which contains Classified Information, specifying the applicable security classification levels.

l) “Security Incident” means an act or an omission, contrary to national laws and regulations, which results in the unauthorised access, disclosure, loss or compromise of Classified Information.

m) “Third Party” means any international organisation or state, including legal entities or individuals under its jurisdiction, which is not a Party to this Agreement.

Article 3 Competent Security Authorities 1. The Competent Security Authorities of the Parties are listed in the Annex of this Agreement. 2. The Competent Security Authorities shall provide each other with official contact details and any changes thereof. Article 4 Security classification levels 1. The following security classifications of the Parties are equivalent and correspond to the security classification levels specified in their national legislation. The third column provides an informal translation which is not part of the national laws and regulations of the Parties and which may be used to mark Classified Information solely in conjunction with the security classification levels of the Parties. For the Kingdom of the Netherlands For the Republic of Estonia Unofficial equivalent in English Stg. ZEER GEHEIM TÄIESTI SALAJANE TOP SECRET Stg. GEHEIM SALAJANE SECRET Stg. CONFIDENTIEEL KONFIDENTSIAALNE CONFIDENTIAL DEPARTEMENTAAL VERTROUWELIJK PIIRATUD RESTRICTED 2. The Receiving Party shall mark all the Classified Information that it has received from the Providing Party under this Agreement with the security classification that corresponds to the security classification of the Originating Party in accordance with the table provided in paragraph 1 of this article. 3. The Receiving Party may alter or revoke the security classification of received Classified Information under this Agreement only upon written consent of the Originating Party. Article 5 Access to Classified Information 1. Access to Classified Information at the security classification level equivalent to DEPARTEMENTAAL VERTROUWELIJK / RESTRICTED / PIIRATUD as mentioned in Article 4 of this Agreement, shall be granted only to those individuals who have a Need to Know, are briefed on their responsibilities and have signed a statement of confidentiality in accordance with national laws and regulations. 2. Access to Classified Information at the security classification levels equivalent to Stg. CONFIDENTIEEL / CONFIDENTIAL / KONFIDENTSIAALNE and above, as mentioned in Article 4 of this Agreement, shall be granted only to those individuals who have a Need to Know, who hold a Personnel Security Clearance at the corresponding level or who have been authorized otherwise to have access to such information in accordance with national laws and regulations, are briefed on their responsibilities for the protection of Classified Information and have signed a statement of confidentiality in accordance with national laws and regulations. Article 6 Security measures 1. The Parties shall take all appropriate measures applicable under their national laws and regulations to protect Classified Information generated and/or provided under this Agreement. 2. The Parties shall take all appropriate measures to ensure that the Providing Party:

a) marks Classified Information with the appropriate classification marking in accordance with its national laws and regulations;

b) informs the Receiving Party of any conditions of release or limitations on the use of the Classified Information provided;

c) informs the Receiving Party of any subsequent change in the security classification level of the Classified Information provided.

3. The Parties shall take all appropriate measures to ensure that the Receiving Party:

a) affords the same level of protection to Classified Information received as afforded to its national Classified Information of an equivalent security classification level;

b) ensures that Classified Information received is marked with its own corresponding security classification level in accordance with Article 4 of this Agreement;

c) ensures that the security classification levels assigned to Classified Information received are not altered or revoked without a prior written consent of the Originating Party;

d) ensures that Classified Information received is not disclosed or released to a Third Party without a prior written consent of the Originating Party;

e) uses Classified Information received solely for the purpose it has been provided for and in accordance with any conditions of release and limitations on the use assigned by the Originating Party.

Article 7 Security co-operation 1. In order to maintain comparable standards of security, the Competent Security Authorities shall, on request, inform each other about their security regulations, policies and practices for protecting Classified Information. 2. Within the scope of this Agreement, the Parties shall recognise Personnel Security Clearances and Facility Security Clearances issued in accordance with the national laws and regulations of the other Party. 3. On request of the Competent Security Authority of one Party, the Competent Security Authority of the other Party shall issue a written confirmation that a valid Personnel Security Clearance or Facility Security Clearance has been issued or that an individual has been authorised otherwise to have access to Classified Information in accordance with national laws and regulations of the requested Party. 4. The Parties shall assist each other in carrying out Facility Security Clearance and Personnel Security Clearance investigations on request and in accordance with national laws and regulations. 5. The Competent Security Authorities shall promptly notify each other in writing about changes in recognised Personnel Security Clearances and Facility Security Clearances for whom or for which a confirmation has been provided. 6. The co-operation under this Agreement shall be effected in English. Article 8 Classified contracts 1. If a Party or a Contractor under its jurisdiction proposes to grant a Classified Contract at a security classification level equivalent to Stg. CONFIDENTIEEL / CONFIDENTIAL / KONFIDENTSIAALNE or above as mentioned in Article 4 of this Agreement with a (Sub-)Contractor under the jurisdiction of the other Party, it shall first obtain written confirmation from the other Party that the Contractor has been granted a Facility Security Clearance and/or Personnel Security Clearance(s) at the appropriate security classification level, in accordance with national laws and regulations. For DEPARTEMENTAAL VERTROUWELIJK / RESTRICTED / PIIRATUD level contracts a Facility Security Clearance shall be required if mandated by national laws and regulations of the Contractor. 2. The Competent Security Authority shall ensure that the Contractor:

a) ensures that all individuals granted access to Classified Information are informed of their responsibilities to protect Classified Information in accordance with the conditions defined in this Agreement and with national laws and regulations;

b) monitors the security conduct within its facilities;

c) notifies promptly its Competent Security Authority of any Security Incident relating to the Classified Contract.

In addition to subparagraphs a, b and c, the Competent Security Authority shall ensure that the Contractor holds, in accordance with paragraph 1 of Article 8 of this Agreement, a Facility Security Clearance at the appropriate security classification level in order to protect the Classified Information and that the individuals requiring access to Classified Information hold a Personnel Security Clearance at the appropriate security classification level. 3. Every Classified Contract concluded in accordance with this Agreement shall include a security requirements chapter which consists of the following aspects:

a) a Security Classification Guide;

b) a procedure for communication of changes in the security classification level, taking into account paragraph 3 of Article 4 of this Agreement;

c) the channels and procedures to be used for the transport and/or transmission of Classified Information;

d) instructions for the handling and storage of Classified Information;

e) contact details of the Competent Security Authorities responsible for overseeing the protection of Classified Information related to the Classified Contract;

f) obligation for the Contractor to notify its Competent Security Authority of any Security Incident.

4. The Competent Security Authority of the Party authorising the award of the Classified Contract shall forward a copy of the security requirements chapter to the Competent Security Authority of the Receiving Party to facilitate the security oversight of the contract. 5. The procedures for the approval of visits associated with Classified Contract activities by personnel of one Party to the other Party shall be in accordance with Article 11 of this Agreement. 6. The Competent Security Authority shall ensure that, if a Contractor sub-contracts parts of a Classified Contract, the Contractor and the Sub-contractor shall ensure compliance with this article. Article 9 Transmission of Classified Information 1. Classified Information shall be transmitted in accordance with national laws and regulations of the Providing Party or as otherwise agreed between the Competent Security Authorities. 2. When Classified Information is exchanged electronically, it shall be protected by cryptographic means and methods in accordance with procedures to be approved by the Competent Security Authorities. Article 10 Reproduction, translation and destruction of Classified Information 1. Reproductions and translations of Classified Information shall be marked with the same security classification level as the original and placed under the same protection as the original Classified Information. 2. Translations or reproductions shall be limited to the minimum required for use under this Agreement and shall be made only by individuals who are authorized in accordance with national laws and regulations to access Classified Information at the security classification level of the Classified Information being translated or reproduced. 3. Translations shall contain a suitable annotation in the language into which they have been translated, indicating that they contain Classified Information of the Originating Party. 4. Classified Information marked at the security classification level equivalent to Stg. ZEER GEHEIM / TOP SECRET / TÄIESTI SALAJANE, as mentioned in Article 4 of this Agreement, shall not be translated or reproduced without a prior written consent of the Originating Party. 5. Classified Information marked at the security classification level equivalent to Stg. ZEER GEHEIM / TOP SECRET / TÄIESTI SALAJANE, as mentioned in Article 4 of this Agreement, shall not be destroyed without a prior written consent of the Originating Party. It shall be returned to the Originating Party after it is no longer considered necessary by the Receiving Party. 6. Classified Information marked up to and including the security classification levels equivalent to Stg. GEHEIM / SECRET / SALAJANE, as mentioned in Article 4 of this Agreement, shall be destroyed after it is no longer considered necessary by the Receiving Party, in accordance with its national laws and regulations. 7. If a crisis situation makes it impossible to protect Classified Information provided under this Agreement, the Classified Information shall be destroyed immediately. The Receiving Party shall notify promptly in writing the Competent Security Authority of the Providing Party about the destruction of this Classified Information. Article 11 Visits 1. Visits requiring access to Classified Information are subject to prior written consent of the Competent Security Authority of the host Party, unless otherwise agreed between the Competent Security Authorities. 2. The visitor shall submit the request for visit at least ten days in advance of the proposed date of the visit to their Competent Security Authority, which shall forward it to the Competent Security Authority of the other Party. In urgent cases, the request for visit may be submitted at a shorter notice, subject to prior coordination between the Competent Security Authorities. 3. Request for visit shall include:

a) full name of the visitor, date and place of birth, nationality and passport/ID card number;

b) official job title of the visitor and name of the organization the visitor represents;

c) confirmation of the visitor’s Personnel Security Clearance and its validity or a statement confirming their authorisation to access Classified Information;

d) date and duration of the visit. In the case of recurring visits, the total period covered by the visits shall be stated;

e) purpose of the visit and the anticipated security classification level of Classified Information to be discussed or accessed;

f) name, address, phone number, e-mail address and point of contact of the facility to be visited;

g) dated and stamped signature of a representative of the visitor’s Competent Security Authority.

4. The Competent Security Authorities may agree on a list of visitors entitled to recurring visits. Recurring visit authorisations shall be granted for a period not exceeding twelve months. The Competent Security Authorities shall agree on the further details of the recurring visits. 5. Classified Information provided to or acquired by a visitor shall be treated in accordance with the provisions of this Agreement. 6. Government officials of the Parties are permitted to participate in classified meetings by providing proof of their authorisation to access Classified Information to the meeting organiser or secretariat ahead of the meeting. Article 12 Security Incident 1. The Competent Security Authorities shall immediately inform each other in writing of any actual or suspected Security Incident involving Classified Information of the other Party. 2. The Competent Security Authority of the Receiving Party or another national authority that is responsible according to national laws and regulations, shall investigate immediately any actual or suspected Security Incident. The Competent Security Authority of the Originating Party, or another national authority that is responsible according to national laws and regulations shall, if required, co-operate in the investigation. 3. The Competent Security Authority shall take appropriate measures in accordance with its national laws and regulations to limit the consequences of the Security Incident and to prevent a recurrence. The Competent Security Authority of the Originating Party shall be informed of the outcome of the investigation and, if any, of measures taken. Article 13 Costs Each Party shall bear its own costs incurred in the course of implementing its obligations under this Agreement. Article 14 Dispute resolution Any dispute on the interpretation or application of this Agreement shall be settled exclusively through negotiation between the Parties. Article 15 Relation to other agreements This Agreement does not prevail over any international agreement that has already been or may be entered into and that specifically governs a transaction otherwise governed by this Agreement. Article 16 Implementing arrangements The Competent Security Authorities may conclude implementing arrangements pursuant to this Agreement. Article 17 Final provisions 1. This Agreement is concluded for an indefinite period of time. Each Party shall notify the other Party through diplomatic channels once the national procedures necessary for entry into force of this Agreement have been completed. This Agreement shall enter into force on the first day of the second month following the receipt of the latter notification. 2. With regard to the Kingdom of the Netherlands, this Agreement shall apply to the European part of the Netherlands and the Caribbean part of the Netherlands (the islands of Bonaire, Sint Eustatius and Saba). 3. This Agreement may be amended with the mutual consent of the Parties. Either Party may propose amendments to this Agreement at any time through diplomatic channels. Such amendments shall enter into force under the conditions laid down in paragraph 1 of this article, with the exception of an amendment of the Annex, which amendment shall enter into force on a date to be agreed upon by the Parties. 4. A Party may terminate this Agreement in writing at any time through diplomatic channels. In this case, the Agreement shall expire six months after receipt of such notification. 5. Regardless of the termination of this Agreement, all Classified Information provided or generated under this Agreement shall be protected in accordance with this Agreement for as long as it remains classified. IN WITNESS whereof the representatives of the Parties, duly authorised thereto, have signed this Agreement. DONE in Brussels on 16 March 2026 in two original copies, in the English language. For the Kingdom of the Netherlands, T.B.W. BERENDSEN For the Republic of Estonia, M. TSAHKNA Annex The Competent Security Authority for the Republic of Estonia is: National Security Authority (NSA) Estonian Foreign Intelligence Service The Competent Security Authority for the Kingdom of the Netherlands is: General Intelligence and Security Service Ministry of the Interior and Kingdom Relations The delegated Competent Security Authority for the Kingdom of the Netherlands in the military domain is: Defence Security Authority Directorate-General of Policy Ministry of Defence D. PARLEMENT Het Verdrag, met Bijlage, behoeft ingevolge artikel 91 van de Grondwet de goedkeuring van de Staten-Generaal, alvorens het Koninkrijk aan het Verdrag, met Bijlage, kan worden gebonden. G. INWERKINGTREDING De bepalingen van het Verdrag, met Bijlage, zullen ingevolge artikel 17, eerste lid, van het Verdrag in werking treden op de eerste dag van de tweede maand die volgt op de ontvangst van de laatste kennisgeving waarin de partijen elkaar langs diplomatieke weg in kennis hebben gesteld van de voltooiing van de nationale procedures die nodig zijn voor de inwerkingtreding van het Verdrag. Uitgegeven de vierentwintigste maart 2026. De Minister van Buitenlandse Zaken, T.B.W. BERENDSEN