Estonia wants to introduce registration of AI agents: lawyers and IT companies warn of risks

Estonia has developed legislative changes that provide for the introduction of special codes for registering artificial intelligence agents. They will allow distinguishing human actions from operations performed on their behalf by AI. However, the initiative has already attracted criticism from technology companies, lawyers and government agencies due to potential threats to digital security.

This is reported by the Estonian publication ERR News.

How will the registration of AI agents work

Unlike conventional chatbots, AI agents are able not only to answer questions, but also to independently perform assigned tasks.

For example, they can help users with filling out tax returns, analyzing bank accounts, comparing mobile phone tariffs or searching for airline tickets.

At the same time, to perform such operations, programs sometimes need to access personal data, financial information and other confidential information.

That is why the Estonian authorities propose to create a mechanism for identifying AI agents.

Estonian Minister of Economic Affairs and Industry Liina Vähtras explained that the state does not plan to provide artificial intelligence with a separate digital identity.

Instead, citizens will be able to register an additional “agent code” that will be used to identify operations performed by the program on behalf of a specific person.

Information about such codes is planned to be stored in a centralized database.

This will allow state and private information systems to establish which actions are performed by the user personally and which by his digital assistant.

How many AI agents can one person register

Initially, the legislative initiative provided for broader possibilities for using AI agents.

In particular, the possibility of their registration by legal entities, as well as the use of several agents by one user, was considered.

However, it was decided to abandon these provisions.

At the first stage, it is proposed to allow an individual to register only one AI agent.

Why IT companies opposed the bill

One of the main critics of the initiative was Cybernetica, which participated in the development of Estonia’s e-government infrastructure.

Its representatives prepared 11 pages of comments on the bill.

According to the company, the document contains contradictions, is insufficiently developed and in its current form may create risks for digital security.

Cybernetica Development Manager Arne Ansper emphasized that the usual registration of an AI agent is not enough to guarantee security.

In his opinion, such programs should use reliable authentication and electronic signature mechanisms.

Their level of protection should correspond to the current Estonian digital identification tools, in particular ID cards, Mobile-ID and Smart-ID.

The expert warned that granting AI agents broad powers with an insufficient level of protection could weaken the security of the entire digital system.

Who will be responsible for artificial intelligence errors

The experts paid special attention to the issue of legal liability for the actions of AI agents.

The President of the Estonian Information Technology and Telecommunications Association Ats Albre drew attention to the lack of sufficiently clear rules regarding liability for operations that the program performs on behalf of a person.

In particular, this concerns situations when an AI agent independently transfers the user’s personal data to state authorities.

According to the representative of the association, the ultimate responsibility for such actions should remain with the person on whose behalf the agent works.

At the same time, experts believe that these issues need to be resolved before the introduction of the new system.

When the bill can be considered in parliament

According to ERR News, the bill did not receive approval from any Estonian ministry by the established deadline.

Only the State Office expressed support for the document.

Minister of Economic Affairs and Industry Liina Vähtras said that legal, technical and communication working groups are working on the initiative in parallel.

She also did not rule out further revisions to the proposed provisions.

It is expected that the legislative changes may be submitted to the Estonian parliament, the Riigikogu, in early November 2026.