Estonia - Data and AI Strategy
Data and Artificial Intelligence White Paper 2024–2030
Andmete ja tehisintellekti valge raamat 2024–2030
Estonia
RAI-EE-NA-DAIWPXX-2024Estonia - Data and AI Strategy is Draft in Estonia as of 9 Sep 2026, according to mkm.ee.
PolicyGovernance and OversightData Protection and PrivacyThe Data and Artificial Intelligence White Paper 2024–2030 sets out strategic guidance for Estonian public bodies and industry, published by the Ministry of Economic Affairs and Communications on 2024-02-08. Currently in Draft status, it establishes national targets for trustworthy AI, public service automation, and data governance.
Summary
The Data and Artificial Intelligence White Paper 2024–2030 (Andmete ja tehisintellekti valge raamat 2024–2030) currently remains in Draft status. The most recent dated event recorded for the policy document is its formal registration entry in the document register of the Ministry of Economic Affairs and Communications on 2024-03-05 following the close of public consultation on 2024-02-28.
Prepared by the Ministry of Economic Affairs and Communications in cooperation with the Ministry of Justice, Ministry of Education and Research, and the Government Office, the White Paper outlines Estonia's national strategic vision for its data economy and artificial intelligence ecosystem through 2030 under the overarching strategy Digital Society 2030.
The White Paper targets key domains including data governance and access, human-centered and trustworthy artificial intelligence, public service automation, language technology, competencies, and research. Near-term operational targets are specified through annexed measures, namely the AI Action Plan 2024–2026 and the Data Action Plan 2024–2025.
Because the White Paper is a non-binding strategic policy instrument, no regulatory body enforces it or issues penalties under it. It establishes policy guidance and strategic directions across government, academia, and industry rather than creating direct statutory obligations or administrative sanctions.
Monitoring and progress reviews are conducted through inter-ministerial coordination and designated lead authorities against action plan milestones. Legally binding obligations, fundamental rights safeguards, and enforcement mechanisms for artificial intelligence systems remain governed by applicable national and European legislation, such as the EU General Data Protection Regulation and the European AI Act.
Full article
Read full text ↗Overview
The Data and Artificial Intelligence White Paper 2024–2030 (Andmete ja tehisintellekti valge raamat 2024–2030) establishes Estonia’s strategic vision, missions and implementation programme for the development of a data‑driven state and an AI‑empowered society covering the horizon 2024–2030. Prepared and published by the Ministry of Economic Affairs and Communications (Majandus‑ ja Kommunikatsiooniministeerium, MKM) in cooperation with the Ministry of Justice, the Ministry of Education and Research and the Government Office (Riigikantselei), the document synthesises international trends, assesses the national landscape, defines a vision and missions, identifies three high‑level sub‑domains and detailed development directions, and annexes near‑term action plans. The White Paper is a strategic policy instrument that guides regulatory, investment and operational measures across public administration, the private sector, academia and civil society; it does not in itself create immediate sectoral legislation but sets objectives and recommended measures for follow‑up regulatory and operational initiatives.
Definitions
The White Paper supplies operational definitions used throughout the strategy. These include tehisintellekt (AI) — aligned with the OECD formulation referenced in the document — and domain terms such as andmevara (data assets), avaandmed (open data), inimkeskne andmekorraldus (human‑centred data governance), kompetentsikeskus (competence centre) and other technical, governance and organisational terms that underpin the proposed measures. Definitions are intended to support coherence across the strategy, action plans and subsequent implementation instruments.
Governance and Institutional Framework
The White Paper proposes a multi‑actor implementation and oversight framework centred on ministries (notably MKM, the Ministry of Justice and the Ministry of Education and Research), the Government Office (Riigikantselei), the State Information System Authority (Riigi Infosüsteemi Amet, RIA) and statistical and research bodies. Implementation foresees designated competence centres, cross‑sector coordination groups, and monitoring & evaluation mechanisms to track progress against annexed action‑plan metrics and milestones. Public bodies are expected to plan and adopt long‑term data and AI strategies, contribute to shared infrastructure (competence centres, data catalogues, shared AI components) and participate in cross‑sector coordination to operationalise the strategy. The White Paper identifies roles for state actors, research institutions, businesses and infrastructure providers in executing the vision through the annexed action plans.
Key Focus Areas
- Data governance and data access & reuse — strengthening data management practices, data catalogues, quality and interoperability to enable trusted access and reuse across public and private sectors.
- Trustworthy, human‑centred AI — promoting AI that preserves fundamental rights, privacy, transparency, explainability and human oversight, aligned with EU and international standards.
- AI‑empowered state and society — accelerating responsible AI adoption in public services to improve efficiency, public value and personalised service delivery while embedding safeguards for rights and security.
- Language technology and national corpus work — prioritising language technologies and linguistic resources important for Estonian language support and public‑service applications.
- Competence centres and skills — establishing and supporting competence centres to provide shared expertise, tools and training for public administration, industry and academia.
- Research & education — reinforcing AI research, innovation and educational pathways to build long‑term capacity and link research outcomes to public value.
- Real‑time economy and digital public infrastructure — enabling data‑driven economic functions and shared digital building blocks that support interoperable services.
- Legal and policy adjustments — identifying the need for updates to legal frameworks, regulatory instruments and standards to translate strategic goals into binding measures where required.
Implementation Framework
The White Paper is operationalised through annexed short‑term action plans: the AI action plan 2024–2026 and the Data action plan 2024–2025, which set concrete tasks, responsible bodies, milestones and indicative schedules for near‑term measures. Implementation expectations include: public institutions preparing and adopting long‑term data and AI strategies; improving data governance and data quality; contributing to and using shared tools and services (competence centres, data catalogues, shared AI components); and executing specific tasks listed in the annexes. The White Paper sets policy and operational expectations rather than immediate statutory obligations, but it anticipates subsequent legislative and regulatory initiatives to give effect to strategic goals. The MKM launched the public consultation on publication, and stakeholder feedback is incorporated into follow‑up planning where relevant.
Monitoring and Evaluation
The document foresees monitoring and evaluation mechanisms to track progress against measurable targets and milestones defined in the annexed action plans. Cross‑sector coordination groups and designated lead institutions will collect progress data, report on implementation status and apply periodic review to adapt activities over the 2024–2030 horizon. Metrics, timelines and responsibility assignments in the AI 2024–2026 and Data 2024–2025 annexes are the primary instruments for near‑term monitoring; longer‑term indicators and staged review points support assessment toward the 2030 vision.
Penalties, Liability, and Appeals
As a strategic white paper, the document does not itself introduce new administrative sanctions, penalties or formal appeals processes. It signals the need to update legal frameworks and regulatory instruments (including alignment with the GDPR and the EU AI regulatory framework) and foresees that enforcement, liability and penalties where required will be addressed through subsequent legislative or regulatory initiatives and by the competent supervisory authorities. Stakeholders should expect that duties and enforcement mechanisms tied to legally binding measures will be defined in those future instruments.
Relationship to Other Instruments
The White Paper explicitly situates itself in relation to existing national strategies (for example Eesti 2035 and Eesti digiühiskond 2030) and anticipates coherence with sectoral policies, national innovation planning and other strategic documents. It requires alignment with data‑protection obligations under the GDPR and anticipates alignment with the EU AI regulatory framework and other sectoral legislation when translating strategy into binding rules. The White Paper is positioned as a coordinating strategy that guides future regulatory, investment and operational measures across Estonia’s public and private ecosystems.
International Alignment
The strategy references international guidance and obligations, notably OECD formulations for AI definitions and principles and the broader EU policy landscape for data protection and AI governance. The White Paper sets the need for coherence with international standards and multilateral instruments, and it explicitly aims to align Estonia’s national approach with EU and OECD recommendations to ensure interoperability, legal consistency and cross‑border cooperation.
Implementation Timeline
| Date | Event |
|---|---|
| 2024-02-08 | White Paper published (public release and consultation start); action plans annexed (AI action plan 2024–2026; Data action plan 2024–2025) |
| 2024-02-28 | Public consultation closing date referenced in stakeholder notices |
| 2024-03-05 | Document register entry (Majandus‑ ja Kommunikatsiooniministeerium) |
Sources and References
| Source | URL |
|---|---|
| Andmete ja tehisintellekti valge raamat 2024–2030 (PDF) — Ministry of Economic Affairs and Communications (MKM) | https://www.mkm.ee/sites/default/files/documents/2024-02/Tehisintellekti%20ja%20andmete%20valge%20raamat%202024-2030.pdf |
| General Data Protection Regulation (GDPR) — EUR‑Lex (consolidated text) | https://eur-lex.europa.eu/eli/reg/2016/679/oj |
| European Commission — European approach to artificial intelligence (policy overview) | https://digital-strategy.ec.europa.eu/en/policies/european-approach-artificial-intelligence |
| OECD — AI policy and definitions (OECD AI principles and Observatory) | https://www.oecd.org/going-digital/ai/ |
Requirements for a company
What an organisation has to do under Estonia - Data and AI Strategy, at a glance. Not legal advice — the table below gives the provision and deadline for each item.
Not yet in force (Draft). These requirements apply once the instrument takes effect and may change before then.
Must do
0Nothing in this category.
Must not do
0Nothing in this category.
Should do
6- Prepare and adopt long-term data and AI strategies aligned with national objectives.Estonian public bodies and institutions
- Contribute to and use shared tools, including competence centres, data catalogues, and shared AI components.Estonian public institutions
- Deploy AI systems that preserve fundamental rights, privacy, transparency, explainability, and human oversight.Public administration and AI service deployers
- Strengthen data management practices, catalogues, quality, and interoperability to facilitate trusted data reuse.Public and private sector data managers
- Align national data and AI initiatives with GDPR data protection rules and the EU AI regulatory framework.Estonian public and private sector organisations
- Participate in cross-sector coordination groups and collect progress data to report on implementation status.Designated lead institutions and public bodies
Should not do
0Nothing in this category.
Who must do what
The obligations under Estonia - Data and AI Strategy, most serious first. Not legal advice — verify against the official text before relying on it.
| # | Who | Requirement | By when | Where | Severity |
|---|---|---|---|---|---|
| 1 | Estonian public bodies and institutions | Prepare and adopt long-term data and AI strategies aligned with national objectives. “Public bodies are expected to plan and adopt long-term data and AI strategies” | — | Governance and Institutional Framework | Recommended |
| 2 | Estonian public institutions | Contribute to and use shared tools, including competence centres, data catalogues, and shared AI components. “contribute to and use shared tools and services (competence centres, data catalogues, shared AI components)” | — | Implementation Framework | Recommended |
| 3 | Public administration and AI service deployers | Deploy AI systems that preserve fundamental rights, privacy, transparency, explainability, and human oversight. “promoting AI that preserves fundamental rights, privacy, transparency, explainability and human oversight” | — | Key Focus Areas | Recommended |
| 4 | Public and private sector data managers | Strengthen data management practices, catalogues, quality, and interoperability to facilitate trusted data reuse. “strengthening data management practices, data catalogues, quality and interoperability to enable trusted access and reuse” | — | Key Focus Areas | Recommended |
| 5 | Estonian public and private sector organisations | Align national data and AI initiatives with GDPR data protection rules and the EU AI regulatory framework. “requires alignment with data‑protection obligations under the GDPR and anticipates alignment with the EU AI regulatory framework” | — | Relationship to Other Instruments | Recommended |
| 6 | Designated lead institutions and public bodies | Participate in cross-sector coordination groups and collect progress data to report on implementation status. “Cross‑sector coordination groups and designated lead institutions will collect progress data, report on implementation status” | — | Monitoring and Evaluation | Recommended |
Related Regulations
More AI regulation in Estonia
© Regulations.AI · reviewed against official sources on 9 Sep 2026 using Gemini 3.6 Flash