Report of Estonia's AI Taskforce
Estonia · Governance body · Estonia's AI Taskforce
Our summary
This report from Estonia's expert taskforce presents a comprehensive action plan for implementing artificial intelligence applications (called "kratts" in Estonian) across the public and private sectors. The document proposes measures to develop foundational competencies, encourage pilot projects, support research and development, enhance education, and establish a legal framework for AI deployment. Estonia aims to leverage its strong digital infrastructure and become a role model for responsible and beneficial AI integration.
Written by the Index in our own words. It is not legal advice; the official text is the authority.
Inside this policy
Every section of this policy in order. Our notes summarise each one in plain language and do not quote the official text, which is the authority.
Drafted by the Index An automated summary of the official text, not yet reviewed by a person.Reviewed Checked by a person against the official text.
3 sections
Jump to a chapter
Foreword
Estonia's AI Taskforce proposes a strategy to develop artificial intelligence to address economic challenges including labour shortages and productivity, with 67% of Estonian public support for cautious implementation, through an agile biannual action plan, increased R&D funding to 1% of GDP, competitive grants for doctoral candidates, and investment increases in IT, while the public sector acts as a smart customer to pioneer AI solutions and existing legislation requires modifications rather than comprehensive new regulation. The strategy includes five categories of short-term initiatives until 2021 for standard components and awareness-raising, establishment of a working group to monitor implementation and plan long-term strategy, and public sector proposals including reusable tools, test project funding, technological sandboxes, data management workshops, and a personal virtual assistant concept. For private sector support, the taskforce proposes grants for proof of concept up to 100,000 euros, pilot project support up to 50,000 euros with 30% own contribution, and product implementation support up to 200,000 euros with 30% own contribution; for research and education, increased investment in higher education, expanded postgraduate programmes, a digital innovation hub, and participation in European high-performance computing projects, with the expert group established in mid-2018 to prepare legislation clarifying the judicial framework, develop an AI action plan, and communicate with the public, while labour market adaptation and social impacts are being developed separately by other ministries.
Hitsa);
Estonia's AI Taskforce report defines kratt as narrow artificial intelligence applications performing specific functions and recommends the public sector adopt AI across all departments by implementing a two-year action plan with targets of 25 institutions using kratts by end 2020 and 5 basic kratt components created, establishing chief data officer positions, developing technological sandboxes and basic reusable modules (video tagging, image tagging, audio tagging, process mining, chatbots, sentiment analysis, language technology services), and creating the #bürokratt system architecture for interoperability. The report identifies obstacles to adoption including insufficient awareness and skills, funding gaps addressed through EU support up to 100,000 euros per project plus estimated 7-8 million euros for test projects, lack of data access and quality, and limited data governance, proposing measures such as awareness seminars, training programmes costing approximately 250,000 euros for two years, an authorization platform for data consent, open data portal enhancement, and data audits. For the private sector, the report identifies developer and implementer companies across three categories-leaders with export over 30 million euros, ambitious companies with export over 1.25 million euros or added value over 25,000 euros per employee, and growth companies with annual growth or export increase over 20 percent-facing obstacles of knowledge gaps, specialist shortages, weak financial capacity, and low digitalization levels, proposing systematic field development through an appointed organization, web-based and masterclass training modeled on Finland's Elements of AI, and support for business digitalisation investments.
Cz EU28 UK
Estonia promotes digital transformation and artificial intelligence development through state support programmes including digital diagnostics (800,000 euros), product development grants (up to 200,000 euros per project, 1 million euros budget), and a proposed 50 million euro measure for 2019-2021, alongside expanding education through higher doctoral funding, at least 50 master's students within two years, at least 20 doctoral students in artificial intelligence within two years (approximately 50,000 euros annually per candidate), hiring 8 lecturers (0.8 million euros annually), and approximately 5 million euros in additional four-year education investments, while establishing organisational capacity through a cross-Estonian Digital Innovation Hub and 2 million euro investment in EuroHPC projects. For legal framework, Estonia requires no dedicated artificial intelligence act but must clarify state liability for artificial intelligence system actions in public administration, apply user responsibility and risk liability in private relationships, ensure automated decision-making is lawful only when it has a legal basis, prohibit processing of data volumes greater than minimally required or cross-usage without justification, monitor technology concentrations affecting markets, and address price-setting algorithms' potential to enable cartels; manufacturers bear strict liability for product defects and must comply with existing data protection rules. Development of artificial intelligence systems must adhere to ethical standards protecting human dignity, freedom from manipulation, democratic integrity, equality, and civil rights including transparency and control over automated processing.
Controls
What this policy requires, forbids, grants or penalises, one control at a time and in our own words. Each control links to the official text, which is the authority. This is not legal advice.
Drafted by the Index Drafted automatically from the official text, not yet reviewed by a person.Reviewed Checked by a person against the official text.
Themes covered 2 of 35
Choose a theme to see only its controls. About the themes
Risk and scope 0 of 4
- Risk classification, not covered
- Prohibited practices, not covered
- Risk management system, not covered
- Impact assessment, not covered
Data and privacy 0 of 4
- Data governance and quality, not covered
- Data subject rights and consent, not covered
- Cross-border data transfer, not covered
- Copyright and training data, not covered
Transparency and records 0 of 4
- Transparency and disclosure to users, not covered
- Labelling of synthetic content, not covered
- Technical documentation, not covered
- Record keeping and logging, not covered
Technical safeguards 0 of 4
- Human oversight, not covered
- Accuracy, robustness and cybersecurity, not covered
- Bias and non-discrimination, not covered
- Testing and evaluation, not covered
Assurance and lifecycle 0 of 4
- Conformity assessment and certification, not covered
- Registration and notification, not covered
- Incident and breach reporting, not covered
- Post-market monitoring and corrective action, not covered
Rights and protected groups 0 of 4
- Automated decision-making rights, not covered
- Children and vulnerable groups, not covered
- Biometric identification and surveillance, not covered
- Whistleblowing, complaints and redress, not covered
Roles and organisation 2 of 6
- Supply chain and provider-deployer duties, not covered
- General purpose and foundation models, not covered
- Accountability and governance roles, not covered
- Training and AI literacy, not covered
Enforcement and sectors 0 of 5
- Enforcement, penalties and regulators, not covered
- Sector rules: health, not covered
- Sector rules: finance and insurance, not covered
- Sector rules: employment, not covered
- Sector rules: education, not covered
The full list of controls could not be loaded, so only the first 3 are shown.
Cz EU28 UK 3 controls
- ObligationApplies to: Public authorityDrafted by the Index
The public authority should provide a state support programme of 50 million euros in 2019-2021 to accelerate digitalization and AI adoption across multiple economic sectors beyond manufacturing.
- ObligationApplies to: Public authorityDrafted by the Index
The public authority should extend existing digitalization support measures to include AI-based solutions in their guidelines and evaluation frameworks.
- ObligationApplies to: Public authorityDrafted by the Index
The public authority should increase procurement of AI-based solutions and enable sharing of publicly ordered solutions for reuse across the public sector.
Change history
No changes recorded since we began monitoring this policy.