| Dokumendiregister | Justiits- ja Digiministeerium |
| Viit | 21-1/26/6880-1 |
| Registreeritud | 24.09.2026 |
| Sünkroonitud | 25.09.2026 |
| Liik | Sissetulev kiri |
| Funktsioon | 21 Digiarengu korraldamine |
| Sari | 21-1 Digiriigi arengu kavandamise ning korraldamise kirjavahetus |
| Toimik | 21-1/2026 |
| Juurdepääsupiirang | Avalik |
| Adressaat | TalTech |
| Saabumis/saatmisviis | TalTech |
| Vastutaja | Keaty Siivelt (Justiits- ja Digiministeerium, Kantsleri vastutusvaldkond, Digiriigi valdkond, Digiriigi osakond, AI ja andmete talitus) |
| Originaal | Ava uues aknas |
| Taotle dokumendi eemaldamist või parandamist |
Integrated Research Seminar: Public Sector Innovation Lab
AI-GENERATED PROBLEMS FOR PUBLIC SERVICES
Group members: Griwan Raj Khakurel, Mahrukh Khan, Mansoor Aman, Muhammad Huzaifa, Muhammad Umar
1. The Case and Problem
Generative AI and autonomous agents make it possible to interact with public authorities at unprecedented scale and very
low cost. AI systems could automatically generate and submit large numbers of information requests, requests for
clarification, complaints, or applications. While many such interactions may be legitimate, the volume and speed of
machine-generated demand could create significant administrative burden and potentially disrupt normal service delivery.
Our case therefore examines how public services can prepare for new types of demand and misuse created by AI agents.
2. Focus and Research Question
We will initially examine this issue across the Estonian public sector rather than assuming that one organisation owns the
problem. Our central question is: How might Estonian public authorities remain open and accessible while handling
legitimate machine-generated interactions at AI-enabled scale? This will guide exploration without presupposing a
particular solution. We will investigate where AI-enabled demand could enter existing service processes, how
organisations currently distinguish legitimate requests from misuse, which forms of automated interaction create
administrative pressure, and what legal, procedural, organisational, or technical safeguards could address that pressure. If
evidence identifies a particular service or process as a clearer and more feasible case, we will narrow the study
accordingly.
3. Stakeholders and Fieldwork
We will seek a range of perspectives, including process owners, technical and data specialists, frontline officials, service
users, suppliers, and oversight actors. Initial contacts include Otto Mättas at the State Information System Authority (RIA),
Anni Lehari, the Ministry of Finance, the Ministry of Justice and Digital Affairs, and the Government Office. Potential
service-level cases include the Estonian Unemployment Insurance Fund, Social Insurance Board, and City of Tallinn.
Contact has already been made with Otto Mättas and Anni Lehari, and the contact list will expand as interviews clarify
which organisations and processes are most directly affected.
4. Data Collection
We will combine semi-structured interviews with desk research. The fieldwork will include a minimum of eight
interviews, approximately 45–60 minutes each, with stakeholders representing process ownership, technical/data expertise,
frontline or user experience, and policy or oversight. Interviews will emphasise concrete examples, previous incidents,
attempted responses, failures, and practices currently taken for granted. Desk research will cover relevant Estonian policy
documents, legislation, administrative rules, existing digital-service arrangements, AI initiatives, and publicly available
information on automated or high-volume interactions.
5. Analysis and Expected Outcome
We will map the selected service or process, including its current workflow, decision points, data foundations, legal
mandate, organisational capacity, users and access, and oversight mechanisms. We will compare stakeholder accounts with
documentary evidence and clearly distinguish reported facts, documented evidence, and our own inferences. A key
analytical tool will be an assumptions register containing approximately 10–15 substantive technical, data, legal,
organisational, behavioural, financial, or political assumptions. For the most important assumptions, we will assess
whether evidence supports, questions, or contradicts them, what would break if they proved false, and how they could be
tested or de-risked. This will help us distinguish immediate workload or capacity concerns from deeper structural
constraints and identify a specific, researchable problem that can later support a design brief and actionable pathway for
change.
6. Immediate Next Steps
We will complete the first round of stakeholder outreach, conduct and refine the initial interviews, begin desk research,
and use early evidence to identify the organisation and process most suitable for deeper case study. The interview log and
assumptions register will be maintained from the first interview onward so that findings remain traceable throughout the
project.
From: Syed Muhammad Umar Imtiaz Bukhari <[email protected]>
Sent: Wednesday, September 23, 2026 6:01 PM
To: Anastasia Sanchez Fernandez - JUSTDIGI <[email protected]>
Cc: Muhammad Huzaifa <[email protected]>; Griwan Raj Khakurel <[email protected]>; Mansoor Aman <[email protected]>; Mahrukh Khan <[email protected]>
Subject: TalTech research on AI-generated demand and public-sector regulation
|
Tähelepanu!
Tegemist on välisvõrgust saabunud kirjaga. |
Hi Anastasia,
I hope you are having a good week. I’m reaching out on behalf of a student research team at TalTech’s Public Sector Innovation Lab, where we are working under the supervision of Prof. Veiko Lember.
Our group is investigating an emerging challenge across government: how Estonian public authorities can remain open and accessible while preparing for new types of high-volume demand created by autonomous AI agents, such as machine-generated information requests, complaints, applications, or requests for clarification.
Because this issue is not only technical but also legal and administrative, we are speaking with stakeholders across different parts of government, including RIA and the Ministry of Finance, to understand how existing rules, responsibilities, and public-service processes may need to adapt as agentic interactions become more common.
Given your work in the Legislative Policy Department at the Ministry of Justice and Digital Affairs, we would really value your perspective on the legal and regulatory side of this challenge. We would love to schedule a 45–60 minute semi-structured conversation with you sometime in the next few weeks, either online or in person, depending on what is most convenient.
The discussion would be practical and exploratory. We are particularly interested in questions such as whether existing administrative and procedural rules are equipped to deal with machine-generated interactions at scale, how responsibility and accountability might be handled when an AI agent acts on behalf of a person or organisation, and where new legal or policy questions may emerge as these interactions become more automated.
Since our fieldwork is deliberately cross-sectoral, we also hope the research can be useful to the organisations taking part. We are bringing together perspectives from technical bodies, ministries, document-management professionals, and public-service organisations, and we would be very happy to share an anonymised summary of our final findings with you. This may offer a useful early picture of where different institutions see legal, organisational, or operational gaps emerging.
Regarding privacy and data, all information collected will be used only for our TalTech course project and handled securely. Your contribution will be anonymised in our report, using a broad description rather than your name or exact role.
If this topic sits slightly outside your direct area of work, we would also be very grateful if you could point us towards a colleague within the Ministry who works more directly on administrative law, digital governance, AI regulation, or related legislative questions.
I have attached our short project one-pager for context.
Thank you very much for your time and consideration. I would really appreciate the opportunity to speak with you.
Best regards,
Umar Bukhari
On behalf of the TalTech Research Group (Griwan Raj Khakurel, Mahrukh Khan, Mansoor Aman, Muhammad Huzaifa)
Integrated Research Seminar: Public Sector Innovation Lab
AI-GENERATED PROBLEMS FOR PUBLIC SERVICES
Group members: Griwan Raj Khakurel, Mahrukh Khan, Mansoor Aman, Muhammad Huzaifa, Muhammad Umar
1. The Case and Problem
Generative AI and autonomous agents make it possible to interact with public authorities at unprecedented scale and very
low cost. AI systems could automatically generate and submit large numbers of information requests, requests for
clarification, complaints, or applications. While many such interactions may be legitimate, the volume and speed of
machine-generated demand could create significant administrative burden and potentially disrupt normal service delivery.
Our case therefore examines how public services can prepare for new types of demand and misuse created by AI agents.
2. Focus and Research Question
We will initially examine this issue across the Estonian public sector rather than assuming that one organisation owns the
problem. Our central question is: How might Estonian public authorities remain open and accessible while handling
legitimate machine-generated interactions at AI-enabled scale? This will guide exploration without presupposing a
particular solution. We will investigate where AI-enabled demand could enter existing service processes, how
organisations currently distinguish legitimate requests from misuse, which forms of automated interaction create
administrative pressure, and what legal, procedural, organisational, or technical safeguards could address that pressure. If
evidence identifies a particular service or process as a clearer and more feasible case, we will narrow the study
accordingly.
3. Stakeholders and Fieldwork
We will seek a range of perspectives, including process owners, technical and data specialists, frontline officials, service
users, suppliers, and oversight actors. Initial contacts include Otto Mättas at the State Information System Authority (RIA),
Anni Lehari, the Ministry of Finance, the Ministry of Justice and Digital Affairs, and the Government Office. Potential
service-level cases include the Estonian Unemployment Insurance Fund, Social Insurance Board, and City of Tallinn.
Contact has already been made with Otto Mättas and Anni Lehari, and the contact list will expand as interviews clarify
which organisations and processes are most directly affected.
4. Data Collection
We will combine semi-structured interviews with desk research. The fieldwork will include a minimum of eight
interviews, approximately 45–60 minutes each, with stakeholders representing process ownership, technical/data expertise,
frontline or user experience, and policy or oversight. Interviews will emphasise concrete examples, previous incidents,
attempted responses, failures, and practices currently taken for granted. Desk research will cover relevant Estonian policy
documents, legislation, administrative rules, existing digital-service arrangements, AI initiatives, and publicly available
information on automated or high-volume interactions.
5. Analysis and Expected Outcome
We will map the selected service or process, including its current workflow, decision points, data foundations, legal
mandate, organisational capacity, users and access, and oversight mechanisms. We will compare stakeholder accounts with
documentary evidence and clearly distinguish reported facts, documented evidence, and our own inferences. A key
analytical tool will be an assumptions register containing approximately 10–15 substantive technical, data, legal,
organisational, behavioural, financial, or political assumptions. For the most important assumptions, we will assess
whether evidence supports, questions, or contradicts them, what would break if they proved false, and how they could be
tested or de-risked. This will help us distinguish immediate workload or capacity concerns from deeper structural
constraints and identify a specific, researchable problem that can later support a design brief and actionable pathway for
change.
6. Immediate Next Steps
We will complete the first round of stakeholder outreach, conduct and refine the initial interviews, begin desk research,
and use early evidence to identify the organisation and process most suitable for deeper case study. The interview log and
assumptions register will be maintained from the first interview onward so that findings remain traceable throughout the
project.