evidoria

← Back to browse

Good practice Imported

The Netherlands' National AI Regulatory Sandbox — a Single Access Point Built on a 2024 Pilot

Netherlands · The Hague · See the Netherlands profile

Ahead of the EU AI Act's August 2026 deadline, the Netherlands designed one multi-sector AI regulatory sandbox -- a single access point run jointly by the RDI and the Data Protection Authority -- building on a 2024 pilot that handled 40 questions from 25 organisations.

Details

Promoter
Rijksinspectie Digitale Infrastructuur (RDI) & Autoriteit Persoonsgegevens (AP)
Period
2023–2026 (pilot 2024; sandbox required to launch by 2 August 2026)
Keywords
AI regulation, digital government, data protection, market surveillance

Description

Under Article 57 of the EU AI Act, every member state must operate at least one AI regulatory sandbox by 2 August 2026. The Netherlands designed a single, multi-sectoral sandbox jointly coordinated by the Rijksinspectie Digitale Infrastructuur (RDI) and the Autoriteit Persoonsgegevens (AP, the Dutch data protection authority), with all eight national AI Act market-surveillance authorities participating behind one digital access point -- so an AI provider does not need to work out which regulator to approach. Start-ups and SMEs are intended to get priority access.
The design published in April 2025 builds on a 2023 exploration phase and a 2024 pilot that fielded 40 questions from 25 organisations, which shaped the intake process, scope and single-point-of-contact model now proposed for the full sandbox.
Honest caveat: as of mid-2026 the sandbox is still being built out toward the statutory August 2026 deadline. No case-outcome or compliance-impact data from an operating sandbox cohort has been published; the evidence base so far is the 2024 pilot and the published design documentation, not live operating results.

Read the full analysis: https://www.autoriteitpersoonsgegevens.nl/en/system/files?file=2025-04%2FProposed+Dutch+regulatory+sandbox.pdf

Implementation

Implementation detail (cost, timeline, staffing, conditions for success) is not yet available for this practice.

Do you run this practice? Claim it — verified implementers get a public contact pathway and can propose corrections.

Data sources

Where this practice's information was retrieved from, and when.

Similar practices you may find useful