The UK Information Commissioner's Office (ICO) has published the findings of its research on the feasibility of a statutory regulatory sandbox (SRS) to test innovations in data protection, including those related to artificial intelligence (AI).

Faced with the limitations of its current regulatory sandbox, notably for the use of real personal data in complex cases and for subjects requiring coordination between multiple regulators, the ICO has explored this new model. The SRS project, conducted with the Regulatory Innovation Office, would offer an experimental regime with temporary flexibility regarding certain parts of data protection legislation. The report concludes that such a device is feasible but presents challenges, such as protecting the ICO's independence and ensuring individuals' rights through equivalent mechanisms. It emphasizes that public trust and a clear public benefit are prerequisites, and that while demand is niche, the potential impact is significant.

Implementing such a sandbox would require legislative amendment by the government. In parallel, the ICO commits to improving its current offering to make it faster and its conclusions clearer for participants. The authority also collaborates with other regulators such as the Financial Conduct Authority (FCA) and the Office of Communications (Ofcom) within the Digital Regulation Cooperation Forum (DRCF), and supports government initiatives like the AI Growth Advisory Lab (AIGL).