Regulatory sandbox

A regulatory sandbox (RS) is a controlled testing environment that allows innovators and regulators to trial new products, services, technologies, or processes under defined conditions. The purpose is to reduce regulatory uncertainty, generate real-world evidence, and inform the development, adaptation, or administration of regulatory frameworks. Regulatory sandboxes are used across multiple sectors worldwide, including finance, energy, mobility, digital services, artificial intelligence, data governance, and increasingly the health sector. Because they emerged in different industries and jurisdictions, multiple definitions coexist, each shaped by specific regulatory cultures, policy goals, and stakeholder needs.[1]

Concept

Regulatory sandboxes typically include three core elements:

1. A time-limited and scope-limited test environment where innovations can be trialed under supervision.
2. Close interaction between innovators, regulators, and other relevant stakeholders throughout the testing period.
3. Evidence generation to support future regulatory decisions, risk management, or rulemaking.

In contrast to general regulatory experimentation, sandboxes are explicitly designed as tools for practical learning, policy development, and implementation-oriented evaluation.[2]

Different Definitions and Contexts

Sectoral Variation

The concept originated in the financial sector, particularly within FinTech innovation (e.g., the UK Financial Conduct Authority in 2015).[3] It has since been adopted in various sectors:

• Energy systems (e.g., smart grids, decentralized markets) [4]
• Telecommunications and digital platforms [5]
• Mobility and autonomous vehicles [6]
• Artificial intelligence and data ecosystems [7]
• Health Care and medical technologies [8]

Each field applies the sandbox model differently. Sector-specific risks, regulatory objectives, and innovation cycles lead to distinct interpretations of what a “sandbox” entails.

Geographical Variation

Definitions and implementations vary across regions:

• Europe: Strong ties to data protection, medical device regulation, and consumer rights; governance-heavy approaches. [9]
• North America: More market-driven, often initiated by federal or state-level agencies. [10]
• Asia-Pacific: Rapid adoption, frequently focused on AI, digital health, and financial innovation. [11]
• Africa and Latin America: Sandboxes often support access to services (e.g., digital finance, telemedicine), sometimes in contexts with limited regulatory resources. [12]

Stakeholder Perspectives

Stakeholders approach regulatory sandboxes with different priorities:

• Regulators: Evidence generation, risk management, and responsive governance.
• Industry and innovators: Faster testing, reduced compliance burden, accelerated market entry.
• Health Care providers and operators: Real-world implementation testing under safe conditions.
• Public entities and civil society: Emphasis on transparency, safety, ethics, and public value.

Existing Cross-sector Definitions

Definition by Organisation for Economic Co-operation and Development (OECD)

A regulatory sandbox typically involves a temporary regulatory waiver or flexibility, allowing new products, services, or business models to be tested with fewer regulatory constraints. The purpose of sandboxes is to understand the opportunities and risks associated with specific innovations and to develop an appropriate regulatory environment to accommodate them effectively.[13]

Definition by Centre for Regulatory Innovation (CRI)

The Centre for Regulatory Innovation (Canada) defines Regulatory Sandboxes as:

A facility, created and controlled by a regulator, designed to allow the conduct of testing or experiments with novel products or processes prior to their full entry into the marketplace.[14]