SIC's Sandbox on Privacy by Design and by Default in AI — Colombia's Non-Binding Data-Protection Sandbox, Closed Without Published Results

The Superintendencia de Industria y Comercio (SIC), Colombia's data-protection authority, developed a sandbox on privacy by design and by default in AI projects, with technical input from the Presidential Advisory Office for Economic Affairs and Digital Transformation. It was presented to the Global Privacy Assembly in 2021 and is aligned with Colombia's national AI policy (CONPES 3975 of 2019).
The sandbox is described as a preventive, supervised and temporary experimentation space where AI developers create collaborative compliance solutions with the authority's non-binding accompaniment, using tools such as privacy impact assessments, privacy by design and by default, and accountability measures. Aims include helping companies comply and suggesting regulatory adjustments as technology advances.
The OECD.AI policy navigator records the initiative as non-binding, launched in 2020 and complete in 2022.
Caveats: none of the sources reviewed publish the number of applicants, the participating projects, or measured results, so the practice is included as a documented design with unverified impact.

Read the full analysis: https://globalprivacyassembly.org/wp-content/uploads/2021/07/B6.-SIC-Colombia-Sandbox-on-privacy-by-design-and-by-default-in-AI-projects.pdf