Estonia - AI and Data Action Plan

AI and Data Action Plan (Kratt) 2024–2026

AI and Data Action Plan (Kratt) 2024–2026 (Tehisintellekti tegevuskava 2024–2026)

Estonia

RAI-EE-NA-ADAPKXX-2024
Effective: 8 Feb 2024
In Force(In Force)As published at kratid.ee · checked 9 Sep 2026

Estonia - AI and Data Action Plan is In Force in Estonia as of 9 Sep 2026, according to mkm.ee.

PolicyGovernance and OversightAccountability and Documentation
Export PDF

The AI and Data Action Plan 2024–2026 sets out strategic AI measures for Estonian public agencies and businesses, issued by the Ministry of Economic Affairs and Communications in 2024. The policy took effect on 8 February 2024 and is in force. It creates an AI competence centre and guides national data economy developments.

Summary

The AI and Data Action Plan (commonly referenced as the Kratt action plan) 2024–2026 sets out Estonia’s strategic priorities and concrete measures to advance the country’s data economy and artificial intelligence (AI) capabilities from 2024 through 2026. Building on earlier national AI strategies (2019–2021 and 2022–2023) and a recent Data & AI White Paper (2024–2030), the plan is framed as a practical implementation roadmap rather than binding legislation. It is organised around strengthening public sector adoption, enabling private sector innovation (especially SMEs and deeptech), promoting Estonian language and culture through language technology, improving skills and education, and ensuring trustworthy and human‑centric AI development.

The plan emphasises a whole‑of‑government approach led by the Ministry of Economic Affairs and Communications (MKM) in cooperation with the Government Office (Riigikantselei), Riigi Infosüsteemi Amet (RIA), the Data Protection Inspectorate, and sectoral ministries. A prominent strand of the plan is the creation of an AI competence centre and a dedicated public‑sector implementation support capacity to help state agencies map use cases, run pilots and scale mature solutions. The plan envisions targeted investment (the public communications around it refer to a package of around €85 million for implementation across measures), a mix of grants, transformation support and catalytic funding instruments designed to reduce uptake barriers.

From a governance perspective, the strategy aligns Estonia’s approach with EU‑level developments (including the EU AI Act and broader EU data policy) and stresses interoperable standards, risk assessments, model documentation and heightened attention to privacy and fundamental rights. It calls for adoption of impact assessment practices and safety testing for systems with significant societal effect, expansion of language models and resources for Estonian, and the development of metrics to monitor progress. The plan also includes measures for education and workforce reskilling, public awareness, cybersecurity and model security best practices, and incentives for private sector collaboration with research institutions.

As a policy document rather than a statute, the action plan does not itself create new criminal or administrative penalties; enforcement and sanctions remain within the scope of existing legal instruments (e.g., GDPR and sectoral regulation). However, it sets obligations and expectations for public bodies that receive funding or that implement state‑led projects, and it establishes monitoring and evaluation processes to ensure accountability and course corrections. The plan explicitly situates Estonia to be an early implementer of EU rules and standards while supporting local innovation and safeguarding fundamental rights.

Full article

Read full text ↗

Overview

The AI and Data Action Plan 2024–2026 (commonly referred to as the Kratt plan) is Estonia’s operational roadmap to deliver an inclusive, human‑centred and innovation‑friendly data and AI ecosystem over a three‑year horizon. Released alongside the Data & AI White Paper 2024–2030, the plan sets out a series of coordinated measures to accelerate public sector adoption, support private sector uptake (with special focus on SMEs and deeptech), and strengthen national capabilities in language technologies and data governance. The plan was developed under the leadership of the Ministry of Economic Affairs and Communications (MKM) with contributions from sector ministries and the Government Office; its strategic framing and continuity with Estonia’s prior AI strategies are summarised on the national Kratt portal at Kratid – Vision & Strategies.

Definitions

Key terms used in the action plan reflect EU common usage and Estonian policy practice: "AI" covers systems that perform tasks with varying degrees of autonomy, including machine learning and generative models; "data governance" refers to legal, organisational and technical arrangements for responsible data use; "human‑centred" denotes approaches prioritising human oversight, rights protection and explainability; "competence centre" refers to an institutional vehicle for training, advisory services and cross‑sectoral assistance; and "high‑impact" or "high‑risk" systems are those with substantial effects on safety, health, fundamental rights or essential services. The plan intentionally aligns its terminology with contemporary EU acts and guidance to support interoperability and legal alignment.

Governance and Institutional Framework

The plan designates MKM as the primary coordination body responsible for steering implementation, monitoring progress and convening stakeholder groups, working in concert with the Government Office (Riigikantselei) and sectoral ministries. Operational support and technical implementation are assigned to public agencies such as Riigi Infosüsteemi Amet (RIA) and other specialist bodies. The plan proposes establishing or strengthening an AI competence centre (a coordinated public‑private research and support entity) to provide advisory services, testing infrastructure and piloting capacity for both public sector agencies and private actors. Governance modalities emphasize cross‑ministerial steering, public consultations with industry and academia, and an annual update cycle to keep the plan current with technological and regulatory developments.

Key Focus Areas

The Kratt action plan is structured across several interdependent pillars: (1) public sector transformation — helping government institutions adopt AI into services while safeguarding rights and processes; (2) funding and financing mechanisms — a mix of public investment, grants and support instruments aimed at catalysing development and scaling; (3) skills and education — national programmes to raise AI literacy, reskilling, and targeted support for tertiary and vocational programmes; (4) data governance and human‑centred rules — strengthening data availability, quality, consent frameworks and privacy‑preserving technologies; (5) language technology — substantial focus on resources for Estonian and other Finno‑Ugric languages to avoid digital exclusion; (6) safety, testing and certification — pilot testing, evaluation frameworks and conformity approaches in line with EU good practice; and (7) international cooperation — alignment with EU rules, participation in research networks and standardisation bodies. The plan contains concrete measures under each pillar, allocated milestones and indicative budgets for priority items.

Implementation Framework

Implementation rests on a three‑year operational structure with annual workplans, measurable indicators and designated leads for each action. MKM is charged with convening a multi‑stakeholder steering group, allocating transformation support to public bodies, and disbursing competitive funding rounds. The proposed AI competence centre is tasked with producing technical guidance, model documentation templates, a catalogue of public sector use cases and support for procurement. The plan also envisages setting up common testing environments and sandboxes for experimentation under controlled conditions. A monitoring dashboard and regular public reporting will track indicator progress and budget use.

Monitoring and Evaluation

A central monitoring framework is foreseen that combines quantitative KPIs (e.g., number of public services with AI components, SMEs supported, language resources created, training participants) with qualitative case studies and annual independent reviews. MKM will publish progress reports and update the plan each year to reflect technical developments and feedback from pilot projects. The plan emphasises transparent metrics and an iterative approach enabling course corrections. Evaluation criteria include human‑rights impact, accessibility, interoperability, cost‑benefit outcomes and measurable public value delivered through deployments.

Penalties, Liability, and Appeals

As a non‑regulatory strategy document, the action plan does not itself create new criminal or administrative penalties. It anticipates that compliance and liability are governed by existing law — notably the GDPR for data protection issues, sectoral safety and liability regimes, and forthcoming EU AI Act obligations for regulated AI systems. The plan instructs public procurers and agencies to require appropriate contractual terms (e.g., warranties, audit rights, liability clauses) when acquiring AI solutions, and to use impact assessments and model documentation as preconditions for deployment. Appeals and remedies for rights infringements remain within the established judicial and administrative channels.

Relationship to Other Instruments

The 2024–2026 plan updates and supersedes Estonia’s prior AI action documents for 2019–2021 and 2022–2023 by translating strategic goals into an operational three‑year programme. It complements the Data & AI White Paper 2024–2030 and aligns with national digital‑government strategies and sectoral policies (education, health, finance). The plan also explicitly positions Estonia to adopt and implement EU policy instruments — notably the EU AI Act, EU data strategy measures and OECD AI guidance — and to adapt national procedures (procurement, data exchange, certification) accordingly.

International Alignment

International alignment is a central pillar: the plan commits to synchronising national measures with EU legislative timelines (including preparatory actions to implement the EU AI Act), participating in European testing and certification initiatives, and contributing to standardisation efforts. It seeks to maximise Finland and Nordic cooperation in language technology and to engage with EU funding instruments to co‑finance infrastructure and research. The plan emphasises reciprocity with global norms on privacy, cybersecurity and human rights in AI deployment.

Implementation Timeline

PeriodMajor Deliverables
Q1–Q2 2024Publication of the White Paper and the 2024–2026 action plan; public consultations and launch of initial pilots (MKM announcement on 2024‑02‑08; seminar 2024‑04‑09).
H2 2024Establishment of competence centre design, first funding rounds and public‑sector transformation pilots.
2025Scaling of successful pilots, rollout of national skills programmes and launch of Estonian language model initiatives (e.g., AI Leap education initiatives announced later as complementary measures).
2026Consolidation of infrastructure, evaluation, annual reporting and preparation for next planning cycle and full alignment with EU regulatory milestones.

Sources and References

SourceType
Majandus‑ ja Kommunikatsiooniministeerium — MKM: Plan for AI and data development (news release, includes links to the White Paper and action plans)Primary Source
Kratid — Vision & Strategies (national AI taskforce portal listing the 2024–2026 plan)Primary Source
ERR News — Report on planned funding and measures for AI implementationSecondary/Media

Requirements for a company

What an organisation has to do under Estonia - AI and Data Action Plan, at a glance. Not legal advice — the table below gives the provision and deadline for each item.

Must do

0

Nothing in this category.

Must not do

0

Nothing in this category.

Should do

6
  • Include specific contractual terms such as audit rights, liability clauses, and warranties when procuring AI solutions.Public sector procurers acquiring AI solutions
  • Conduct comprehensive impact assessments prior to deploying AI systems in public sector services.Public sector agencies deploying AI systems
  • Complete thorough model documentation as a precondition before deploying AI systems.Developers and public sector entities deploying AI systems
  • Test AI systems in controlled sandbox environments before widespread deployment.AI developers and public agencies experimenting with new systems
  • Implement consent frameworks and privacy-preserving technologies to support human-centred data governance.Organisations managing data for AI deployment
  • Incorporate Estonian language resources in AI systems to ensure accessibility and prevent digital exclusion.AI solution developers and providers in Estonia

Should not do

1
  • Do not deploy public sector AI systems without prior completion of impact assessments and model documentation.Public sector agencies deploying AI solutions

Who must do what

The obligations under Estonia - AI and Data Action Plan, most serious first. Not legal advice — verify against the official text before relying on it.

#WhoRequirementBy whenWhereSeverity
1Public sector procurers acquiring AI solutionsInclude specific contractual terms such as audit rights, liability clauses, and warranties when procuring AI solutions.
“instructs public procurers and agencies to require appropriate contractual terms (e.g., warranties, audit rights, liability clauses) when acquiring AI solutions”
Before procurementPenalties, Liability, and AppealsRecommended
2Public sector agencies deploying AI systemsConduct comprehensive impact assessments prior to deploying AI systems in public sector services.
“use impact assessments and model documentation as preconditions for deployment”
Before deploymentPenalties, Liability, and AppealsRecommended
3Developers and public sector entities deploying AI systemsComplete thorough model documentation as a precondition before deploying AI systems.
“use impact assessments and model documentation as preconditions for deployment”
Before deploymentPenalties, Liability, and AppealsRecommended
4Public sector agencies deploying AI solutionsDo not deploy public sector AI systems without prior completion of impact assessments and model documentation.
“use impact assessments and model documentation as preconditions for deployment”
Before deploymentPenalties, Liability, and AppealsRecommended
5AI developers and public agencies experimenting with new systemsTest AI systems in controlled sandbox environments before widespread deployment.
“setting up common testing environments and sandboxes for experimentation under controlled conditions”
—Implementation FrameworkRecommended
6Organisations managing data for AI deploymentImplement consent frameworks and privacy-preserving technologies to support human-centred data governance.
“strengthening data availability, quality, consent frameworks and privacy‑preserving technologies”
—Key Focus AreasRecommended
7AI solution developers and providers in EstoniaIncorporate Estonian language resources in AI systems to ensure accessibility and prevent digital exclusion.
“substantial focus on resources for Estonian and other Finno‑Ugric languages to avoid digital exclusion”
—Key Focus AreasRecommended

© Regulations.AI · updated on 20 Sep 2026 · reviewed against official sources on 9 Sep 2026 using Gemini 3.6 Flash