Uruguay's AI and Data Sandboxes — Decree 276/025 Opens Two-Year Supervised Testing Under AGESIC, With No Projects Yet Reported

Uruguay's Decree 276/025, promulgated on 2 December 2025 and published on 10 December 2025, implements Articles 74 and 75 of Law 20.212 by creating a minimum governance scheme for 'controlled testing environments' (regulatory sandboxes) and 'data spaces' for innovative projects, especially in data use and artificial intelligence.
AGESIC approves each environment by reasoned resolution. A sandbox may last at most two years, and any regulatory exception granted cannot outlast it. Applicants must submit a timeline, the persons affected, data-protection impact assessments, an estimate of possible harms with remedies, and a public-interest justification where relevant. Use of personal data requires a favourable opinion from the personal-data regulator (URCDP).
A Technical Evaluation Committee chaired by AGESIC, with the URCDP, the Ministry of Industry and the national research and innovation agency, manages applications, monitoring and future regulatory recommendations. Principles of equity, non-discrimination, accountability, transparency, audit and safe innovation are written into the decree.
Evidence caveat: the sources describe the legal framework only. Press coverage at launch mentioned no admitted projects, outcomes or published evaluation, so this entry records a governance design to watch, not a demonstrated result.

Read the full analysis: https://www.impo.com.uy/bases/decretos/276-2025