Answer to request

ERAELU KAITSE JA RIIGI LÄBIPAISTVUSE EEST FOR PUBLIC USE Agnieszka Rzycka - Osiej Yours: 03.02.2026 nr GDPR.PL [email protected] Ours: 17.02.2026 nr 2.2-9/26/445-2 Answer to request Estonian Data Protection Authority (Estonian DPA) has received your request for answers to questions related to codes of conduct and legal regulations concerning artificial intelligence. As of today, the Estonian DPA has not approved any codes of conduct pursuant to Article 40 of the GDPR. Furthermore, there are currently no codes of conduct in the process of being developed or adopted. With regard to legal regulation concerning artificial intelligence, no specific national legislation is currently in force. Although the AI Act foresees the adoption of a national implementing act, such legislation has not yet been enacted in Estonia. The Estonian DPA therefore recommends requesting information on forthcoming legislation from the Ministry of Justice and Digital Affairs. I hope the above answer clarifies the current situation. Should you require any further information, please do not hesitate to contact us. Respectfully (signed digitally) Kirsika Nigul Advisor on European cooperation and legal affairs authorized by Director General Tatari tn 39 / 10134 Tallinn / 627 4135 / [email protected] / www.aki.ee Registrikood 70004235