EY refers to the global organization, and may refer to one or more, of the member firms of Ernst & Young Global Limited, each of which is a separate legal entity. Ernst & Young Global Limited, a UK company limited by guarantee, does not provide services to clients.
How EY can Help
-
Our Government & Public Sector teams help governments transform their digital approach to improve citizens’ experiences. Learn more.
Read more
Thorough preparation is key to scaling success. Infrastructure readiness proves critical, with 45% citing inadequate digital and data systems as barriers to implementation.
Organizations must verify that their technology infrastructure, data governance, regulatory compliance and ethical frameworks can support AI solutions at operational scale before making major investments. The most successful projects use architectural strategies that balance technical ability with security and governance needs.
Estonia’s Bürokratt platform demonstrates this approach through its decentralized model, which processes data within individual agencies. Each agency maintains control over its own data, limiting unnecessary data sharing and reducing the risk of large-scale breaches. Secure interoperability and Estonia’s state authentication service ensure that only verified users access services, while compliance with General Data Protection Regulation (GDPR) and open-source transparency further reinforce privacy protections.
Estonia also obtains informed consent and allows citizens to monitor their data use and share permissions with providers. About 450,000 citizens regularly check data access via the Data Tracker. Through the portal, they can view, track and withdraw consents at any time. In this way, agencies remain accountable for using data only for the specific purpose for which it was collected.
Ethical governance frameworks deserve equal attention, particularly as 42% of organizations cite ethical concerns as implementation barriers. The most effective approaches embed disciplined risk assessment into the development process rather than treating ethics as an afterthought. Canada’s mandatory Algorithmic Impact Assessment (AIA) process illustrates this proactive approach. As Stephen Burt, Chief Data Officer for the Government of Canada, explains, “The directive was founded on principles of algorithmic transparency, dealing with data bias and recourse. If you’re not happy with the decision, how do you address it?”