ICO Releases Discussion Paper on Regulatory Sandbox Beta Phase
Time 2 Minute Read

On January 30, 2019, the UK Information Commissioner’s Office (“ICO”) released a discussion paper on the upcoming beta phase of its regulatory sandbox initiative (the “Discussion Paper”). The ICO had launched a call for views on creating a regulatory sandbox in September 2018, and the feedback received facilitated developing systems and processes necessary to launch the beta phase.

According to the ICO, the purpose of the sandbox is to support the use of innovative products and services that are in the public interest, to assist in developing a shared understanding of what compliance in innovative areas looks like and to support the UK in being an innovative economy.

The Discussion Paper outlines the application process for entering the beta phase of the sandbox, how the ICO sees the sandbox working in practice and the types of support it will offer organizations in the sandbox.  It also presents various questions on its proposed approach, to which it seeks feedback.

The ICO has launched an intention to apply survey to allow organizations to express interest in applying and to provide information about any product or service they plan to enter into the beta phase. Full details of the beta phase will be made available by the end of March with formal applications opening towards the end of April. The beta phase is expected to run from July 2019 to September 2020.

The Centre for Information Policy Leadership (“CIPL”) at Hunton Andrews Kurth LLP previously submitted comments to the ICO on the regulatory sandbox and supports and encourages its development and use in data protection. CIPL plans to hold a by invitation only roundtable on the sandbox in the coming weeks.

You May Also Be Interested In

Time 2 Minute Read

On March 25, 2026, the UK Information Commissioner’s Office and the UK Office of Communications released a joint statement addressing the intersection of online safety and data protection in relation to age assurance.

Time 2 Minute Read

On March 23, 2026, the UK Information Commissioner's Office released new guidance clarifying the use of the new recognized legitimate interest lawful basis for processing personal information under UK data protection law.

Time 3 Minute Read

On February 27, 2026, the UK ICO announced a public consultation on proposed updates to its guidance concerning research, archiving and statistics to reflect the changes introduced by the Data (Use and Access) Act 2025.

Time 2 Minute Read

On February 24, 2026, the UK ICO announced that it had fined Reddit, Inc. £14.47 million following an investigation into the company’s handling of children’s personal information.

Search

Subscribe Arrow

Recent Posts

Categories

Tags

Archives

Jump to Page