Norway's National AI Regulatory Sandbox — Testing High-Risk and Generative AI Before Deployment
Norway
Since 2021, Norway's data protection authority has run about 20 time-boxed AI sandbox projects with public bodies — from NAV's …
Germany · Wiesbaden · See the Germany profile
Evidence: Descriptive / self-reported Top 24% 73/100 · Ask Evidence Copilot about this practice
Germany's Bundesnetzagentur, Hesse's digitalisation ministry and the federal data-protection commissioner simulated an EU AI Act sandbox with two medical-device start-ups, producing a public roadmap ahead of the deadline for member states to stand up real sandboxes.
DE71Ahead of the EU AI Act's deadline for member states to stand up regulatory sandboxes, Germany's Bundesnetzagentur, the Hessian Ministry for Digitalisation and Innovation, and the Federal Commissioner for Data Protection (BfDI) ran a trilateral pilot (May 2025-March 2026) simulating a sandbox with two medical-device start-ups developing high-risk AI systems.
The pilot produced a detailed roadmap on how AI Act conformity requirements intersect with medical-device certification, plus lessons on sandbox-candidate viability, participant needs (confidentiality, structured communication, a maturity model), and cross-agency coordination between a federal regulator, a state ministry and a data-protection authority.
The agencies frame the results explicitly as input to designing Germany's forthcoming statutory AI regulatory sandbox rather than a finished, scaled programme; only two companies took part and the output is procedural guidance rather than a quantified outcome.
Implementation detail (cost, timeline, staffing, conditions for success) is not yet available for this practice.
National / regional programmes Digital Europe Programme
Indicative funding routes for practices of this type — always check each programme's current calls and eligibility rules.
Do you run this practice? Claim it — verified implementers get a public contact pathway and can propose corrections.
Where this practice's information was retrieved from, and when.
Norway
Since 2021, Norway's data protection authority has run about 20 time-boxed AI sandbox projects with public bodies — from NAV's …
Japan
Since 2018, Japan's whole-of-government regulatory sandbox has let firms trial AI, fintech and mobility innovations under supervised exemptions. By March …
Netherlands
The Netherlands Court of Audit audited 9 government algorithms in 2022, finding only 3 met basic requirements, then made algorithm …
Spain
Banco de España's Spain-STING model nowcasts quarterly Spanish GDP growth in real time from early indicators; a 2024 respecification (contemporaneous …
Open full copilot Grounded in cited practices — always check the sources.