The Estonian Institute (EFSI) is a state forensic institution that started operating after the declaration of the Code of Courts on 6 April 1938. The activities of the Institute were inter- rupted by World War II. Starting 1945 Forensic Examination was carried out in Police Crime Investigation Labotatory, prosecutor’s Technical Examination Labo- ratory and University Forensic Medical Unit. The Institute was re-established on 1 January 2008 by the merging of two forensic institutions, the Bureau of Fo- rensic Medicine of Estonia and the Police Board Forensic Service Centre. The EFSI has the competence to perform 45 different types and sub-types of forensic analyses. The staff of the Institute consist of forensic experts, forensic pathologists, forensic psychiatrists and forensic psychologists. The Institute also administers the National list of Officially Certified Experts, which includes 60 experts in 12 areas of forensic expertise. The purpose of the list is to provide courts with a selection of experts who can be used in investigations outside the Institute. Pursuant to law, the persons who can order expertise and analyses from the Institute are the police, courts, the prosecutor’s office as well as specialists of other investigative and administra- tive bodies. It is also possible, by private persons, to order analyses of DNA, parenty testing, toxicol- ogy, graphology, electron microscopy and forensic medicine that are not related to proceedings. In its activities, the Institute follows the principles of the European Network of Forensic Science Institutes (ENFSI): to be impartial, to operate on a high professional and technical level, to be cost- effective, to guarantee the reliability of its expertise results and to be acknowledged at the national and international levels in its activities. EFSI organization has 16 departmentes, with 169 employees including 89 forensic examiners. In order to achieve its goals, the Institute has implemented a quality management system, whichis based on three internationally recognised standards: EVS-EN ISO/IEC 17025 General Re- quirements for the Competence of Testing and Calibration Laboratories: EVS-EN ISO/IEC 17020 Conformity assessment. Requirements for the operation of various types of bodies performing in- spection: EVS-EN ISO 9001 Quality Management Systems. The Institute was accredited by the Estonian Accreditation Centre in 2003. The accreditation scope of ISO17025 (accreditation certificate no L127) covers the Institute’s activities in the fields of toxicology, determination of narcotic drugs and psychotropic substances, gunshot residues and electron microscopy, DNA analyses, mass measurement, investigation of questioned counterfeit euro banknotes, also development and identification of and information technology. The accreditation scope of ISO17020 (accreditation certificate no I072) covers activities in the fields of forensic medical examinations of living person and dead bodies The Institute is certified by the Bureau Veritas Eesti OÜ since 2009 (certificate no EST90645A). Certification gives the confirmation of an independent third party that forensic examinations and analysis and activities related to them, comply with the requirements of the internationally recog- nised management standard ISO 9001. In addition to their everyday work, the staff of the Institute develop and implement innovative ideas, methods and technologies of expertise. The EFSI is a member of many international organisations: the European Network of Forensic Science Institutes (ENFSI), the International Association of Forensic Toxicologists (TIAFT), the International Society for Forensic Genetics, the European Council of Legal Medicine (ECLM), the Network of Baltic Forensic Science Institutes (NBFSI). In addition to the above, our forensic experts take part in cross-border cooperation (Schengen and Prüm treaties) and the Institute has signed cooperation agreements with Estonian universities, the Academy of Science, and Nordic and European institutes. DNA DEPARTMENT The DNA Department performes forensic DNA analyses. The object of the investigations is human DNA. The bulk of this work consists of DNA analyses for the purpose of comparing the DNA profile obtained at the scene with the DNA profile of a person. The DNA Department also performs analyses of fa- milial relationships either to identify a person or to ascertain their kinship. Private persons can order analyses from the DNA department of the EFSI outside criminal or civil proceedings. Paternity tests are the main DNA analyses ordered by pri- vate persons. The department performs around 25-30 thou- sand reactions per year. The department also performs tests that precede DNA analyses, such as determination of blood and sperm. The DNA Department of the EFSI is also the authorised processor of the National DNA Register. The register contains over 10 thousand profiles of unknown source and 37 thousand DNA profiles from suspects.

DOCUMENT DEPARTMENT

The Document Department examines questioned documents usually produced on paper or , where a technical com- parison is required. This includes identity documents, vehicle documents, banknotes, contracts, wills, invoices, application forms, diplomas, certificates etc. Expert analysis of documents, including examination of ban- knotes and handwriting and forensicm accounting, is required in both criminal and civil proceedings, the latter involving mainly economic disputes.

Forensic handwriting analysis is a classic area of forensic expertise in which the main function is to identify the persoon who signed or wrote a certain text. It is important for experts to have extensive experience as the main technical tools used are just a magnifying glass and a microscope. An expert may be able to give a categorical opinion that an individual did or did not write a certain piece of text, but opinions based on prob- ability are also valuable in combination with other evidence. Experts examine texts in both Latin and Cyrillic alphabets. ­Approximately one-third of all work relates to civil disputes.

Document examination. Genuine or false? Printed items such as passports, driving licences or banknotes are examined to identify whether these documents are authentic or how they were forged. The databases and collections of authentic and forged documents available in the Document Department help in determining the source of forgeries. Microscopic and spec- tral methods can be used in examining the material of docu- ments and the Chemistry Department can assist with ohter methods of analysis if required. Examining counterfeit euro banknotes, collecting technical data from them and information Ex- change with other competent institutions are also among the tasks for document experts. In most cases document or handwriting analysis takes about a month to complete. The purpose of is to help in investigating complicated economic crimes. Depending on the nature of the crime, forensic accountants investigate the accounting and re- porting, the distortion of accounting data or submission of incorrect information, the extent of any material damage caused, the correctness of audit conclusions and other matters which may proov- ide important evidence. The examination of accounting documents can be extremely time-consum- ing, depending on the quantity of material, such means that it can often take several months and in some cases somewhat longer.

FORENSIC - IT DEPARTMENT The experts in our IT Department can look for the key- words, correspondence, documents and files requested by investigators in computers and the data media used with computers (hard disks, CDs/DVDs, floppy disks, memory sticks and cards). It is also possible to investigate other digital or electronic equipment that may contain information, which is impor- tant for an investigation. It is also possible to investigate other digital or electronic equipment that may contain information, which is impor- tant for an investigation. Data medium is the main examination object of foren- sic IT examinations and analyses. Hard disks are the most frequently examined data me- dia-they are used in personal computers and laptops as well as many other special-purpose devices (computers) such as the recording equipment of security cameras, DVD re- corders with hard disks, game consoles, etc. There are also micro disks-small hard disks for mobile phones, cameras and palmtop computers. These are powerful data media, which are mainly used to store media files. Optical data media and magnetic tapes-CD, DVD, LTO, DAT, etc. are mainly archiving media seldom used to store operative information, mainly due to the availability of easy-to-use flash drives. However, it is easy to make these data media illegible. As forensic experts, we are interested in the information stored in the memory of devices. Exam- ples of these are bankcard readers with modified extra memories, physical keyloggers in computer keyboards or self-made interception equipment. In addition to the above, we are also always prepared to help investigators in issues concerning video recordings or digital images with our expertise in forensic imaging (conversion, processing and improvement of the quality of video recordings in different formats, resolving the problems concerning the playback of video recordings, extraction of frames, answering questions about dig- ital images, searching data media and devices for the picture and video files relating to cases). It is also possible to conduct forensic voice analyses (also examinations in exceptional cases). This area of expertise investigates the authenticity of recordings, ‘improving’ the quality of record- ings, i.e. eliminating background noise, telephone disturbances, radio disturbance, even slow mu- sic, street noise, etc. in order to make the speech on the recording as audible and understandable as possible, transcribes texts or recordings and identifies the speaker. & TOXICOLOGY DEPARTMENT The Chemistry Department performs analyses and examinations concerning narcotic substances, toxi- cology, alcohol, combustible liquids, paint, fibre, metal and gunshot residue. The Chemistry Department also has a unit in Tartu, which specialises in forensic toxi- cology. The majority of the work consists of analyses and exami- nations of toxic and narcotic substances, and most of the methods used to determine narcotic substances and in toxicology are accredited. Electron microscopic methods used in gunshot residue and elemental analysis are also ac- credited In the course of the analysis of narcotic substanc- es, the narcotic and psychotropic substances are analysed before consumption, but in toxicology they are analysed after consumption (in biological materials such as blood, urine). Toxicology also includes the analyses alcohol and other highly volatile compounds, the active of ingredients of medicines, carboxyhemoglobin and other toxic substances. Alcohol is analysed to determine whether it is bootleg or home-made. Combustible liquid analysis is used to determine whether traces of an accelerant can be found at the scene of a fire. Forensic paint analysis usually concerns car paint. The results of forensic paint analyses are used to ascertain who caused a traffic accident and damage to vehicles. Forensic fibre analysis gives important informa- tion in the investigation of offences against persons. Forensic explosive analyses are used to ascer- tain whether a substance is an explosive or the type of explosive used to cause an explosion. Gunshot residue analysis is used to ascertain whether particles created by the use of a firearm can be found on a person’s hands or clothes. Counterfeit euro coins can be ascertained since 2011. REGIONAL DEPARTMENTS (4) OF FORENSIC MEDICINE The departments of forensic medicine are located in four re- gions of Estonia: the North Estonian Department in Tallinn, the South Estonian Department in Tartu, the West Estonian Department in Pärnu and the East Estonian Department in Kohtla-Järve. All departments perform forensic examina- tions upon living and deceased persons. The department in Tallinn also specialises in and Medial criminalistics, and the department in Tartu specialises in medical toxicology. Forensic medical analyses of persons are used to assess damage to health (injuries), to ascertain offences against the state of health and sexual self-determination or to resolve other medical problems facing law enforcement authorities. Forensic medical analyses of deceased persons are performed when elements of a crime are evident or a crime is suspected. An autopsy is per- formed on a dead body in the event of the impact of an external factor (e.g. hanging, drowning, poisoning, hyperthermia, etc). Medical toxicology tests are used to assess the influence of toxic substances on the basis of the examination rulings submitted by pre-trial investigation authorities or courts. Experts of medical criminalistics investigate the cause or mechanism of death using skeletal remains or parts of a person’s skeleton. After the completion of the new building in Tallinn, the Institute purchased computed tomogra- phy and magnetic resonance equipment for forensic radiology analyses and examinations. In addition to the above, examinations for the assessment of injuries outside legislative proceed- ings can be ordered from the departments of forensic medicine since 2010.

FORENSIC PSYCHIATRY DIVISION The Institute has been performing forensic psychiatric and psychological analyses since 2009. A specific feature offorensic psychiatric and psychological analyses is that they cannot be offered for a fee, as they can only be ordered by investigators within the scope of certain court cases or proceedings if a basis arising from law exists. Approximately 2000 (2500-2700) such analy- ses are requestedper year, the majority of which are analyses for limitation of active legal capacity or institutionalisation requested in the course of guardianship proceedings. The number of such analyses is also high in criminal cases, where investigators try to ascertain the status of the suspect/ witness at the time an act was committed. Analyses are also requested in the event of disputes over custody of children, wills etc. Analyses are in the beggining of the procedure payable for the plain- tiff. The price-list is establisehed by the Forensic Examination Act.

TRAFFIC DEPARTMENT Experts in the Traffic Department analyse all the technical, vehicular and traceology aspects of road accidents. Forensic traffic specialists work on issues related to the reconstruction of road accident ana- lyes the processes of the movement of vehicles. Their analyses are based on the laws of physics. In addition to other methods, the program for reconstruction of road accidents PC-CRASH, which is widely used in Europe, is also used for analyses. Technical analyses of vehicles are performed to check the performance of a vehicle’s systems that guaran- tee road safety and finding any faults or damages in them, which helps to ascertain the aspects that may have had an impact on the vehicle’s movement or drivability independ- ent of the driver’s will. The purpose of technical analyses is not to check the tech- nical condition of the vehicle in accordance with the regu- lation “Requirements to the Technical Condition of Motor Vehicles and Trailers”, but the examination focuses on the technical condition of the vehicle with respect to a specific expertise task and/or traffic situation (road accident). Traffic traceology covers the area of forensic expertise that deals with the identification of vehicles and identifica- tion and examination of the traces left by vehicles.

FINGERPRINT DEPARTMENT

The task of the Department is to analyse and examine fingerprints. The department’s areas of activity include detecting fin- gerprints, photographing fingerprints, identifying persons on the basis of fingerprints and keeping the National Fin- gerprint Register. In addition to fingerprints, the Fingerprint Department also examines palm prints and finger joint prints, some- times even footprints, i.e. the prints left by the human friction skin. The expert opinions given by the Fingerprint Department are based on a holistic approach, the internationally recognised ACE-V principle and the special knowledge and experience of each expert. A qualitative and quantitative print analysis is used to examine the prints left by the papillary lines on the skin, which is then fol- lowed by comparison, evaluation and verification stages. The Fingerprint Department keeps the National Fingerprint Register. The fingerprints of more than 140,000 persons detained by the police or in prisons and the prints found by experts at crime scenes since 1998 are stored in the register both on paper and in electronic format. Fingerprints are generally analysed within the scope of criminal proceedings. Approximately 800 inquiries and examinations are done in the Fingerprint Department every year and almost 1500 registrated fingerprints are compared with the undetected crime Svene places.

TECHNICAL DEPARTMENT The Technical Department analyses and examines the fol- lowing: Trace analysis is done for the purpose of analysing items on the basis of the traces left at the scenes of events. The objects of trace analysis include traces left by picklocks; shoe, foot and tyre prints; locks; physical match instance; plastic bags; die traces; seals; damage to clothes and other traces (e.g. blood traces, ear prints, prints).

Examinations of explosive devices and explosions divide into two main groups depending on whether the ob- jects need identification or the explosion has already occurred and the event and the blown-up object must be reconstruct- ed. Both industrial and home-made objects are examined. Main goal in examining the objects submitted for analysis is to ascertain their structure, characteristics, explosive content and to identify the objects type, make, possible function in the explosive device and usability. Purposes of analyses per- formed after explosions include ascertaining the epicentre of the explosion, the connection between the objects found at the scene of the explosion, the possible structure and activa- tion mechanism of the explosive device and reconstruction Fire dog Aiko helps to find of the event. combustible liquids at the The goals of a fire analysis are: scene of fires. - ascertaining the technical causes of the fire; - ascertaining the place where the fire started; - collecting data about the development of the fire (number of places where the fire was started, how the fire spread, the circumstances that stimulated the spread of the fire) and, if possible, ascertaining the circumstances of the fire (position of doors and windows at the time the fire occurred, broken glass, etc.).

Firearm examinations are performed on firearms, gas and pneumatic weapons, cartridges and the traces left by them in order to ascertain whether the submitted objects are weapons; to identify the type, system, model and modification of weapons, to ascertain how the weapon was made and whether it is usable; to ascertain the type of cartridges used and whether they are usable; to identify a weapon on the basis of bullets, cartridge casings and in exceptional cases other parts of cartridges; to ascertain the direction of the shot on the basis of the traces left on various objects and other circumstances pertaining to shootings. Tervise Street 30 13419 Tallinn Ph: +372 663 6600 e-mail: [email protected] www.ekei.ee