AI Act, Article 57 (national AI regulatory sandboxes)
Regulation (EU) 2024/1689, Article 57
An AI governance rule binding government bodies.
- Criminal exposure
- No
- Private right of action
- No
- Obligation class
- Governance
- Audit expectation
- none
What it requires
- This duty takes effect on (Article 57(1), first subparagraph, as replaced by Regulation (EU) 2026/1744): each Member State's competent authorities must have at least one AI regulatory sandbox operational at national level by then, a year after the Regulation's general date of application of under Article 113.
- This is a Member State duty to establish infrastructure, not a duty on an AI provider or deployer. If you are a provider or prospective provider, you may apply to participate in your Member State's AI regulatory sandbox once established, but nothing in this Article requires you to.
- A provider or prospective provider that follows its agreed sandbox plan and the competent authority's guidance in good faith is not fined under this Regulation, or under other Union or national law actively supervised within the sandbox, for the conduct the sandbox covers. It remains liable under applicable Union and national liability law for any damage inflicted on third parties as a result of the experimentation taking place in the sandbox.
These lines are LexLint's reading of the law's text. Also read by: European Commission (guidance, recorded ).
Who enforces it
Settledness
- As of
- Guidance link
- https://ai-act-service-desk.ec.europa.eu/en/faq?page=5
- Guidance body
- European Commission
- Open questions
- Must a Member State have a national AI regulatory sandbox in place by , as the Commission's questions and answers say, or by , as Article 57(1) now reads?
What it makes you log
Who may demand the log
Regulator, Public
Logging duty
National competent authorities, not providers or deployers, must submit annual reports on a sandbox's progress and results to the AI Office and the Board, and make the reports or an abstract public. This is a government-to-government reporting duty rather than a provider or deployer record-keeping duty.
- Kind
- Explicit
- As of
- Provision
- Article 57(16)
- Trigger
- all_systems
Also on the record
EEA status
- Status
- Pending
- Source link
- https://www.efta.int/eea-lex/32024r1689
What this law does
Each Member State must ensure that its competent authorities establish at least one AI regulatory sandbox at national level, operational by , a date the Digital Omnibus on AI (Regulation (EU) 2026/1744, in force since ) moved back one year from the original deadline; a Member State may instead participate in another Member State's sandbox if that gives equivalent national coverage.
A sandbox provides a controlled environment for developing, training, testing and validating innovative AI systems before they are placed on the market, under a plan agreed with the competent authority, and may include supervised real-world testing.
Article 57 creates no duty on a provider or a deployer: participation is voluntary, and a participating provider or prospective provider that follows its sandbox plan and the competent authority's guidance in good faith is shielded from an administrative fine under this Regulation, and from a fine under other Union or national law actively supervised in the sandbox, for the conduct the sandbox covers.
Such a participant remains liable under applicable Union and national liability law for any damage inflicted on third parties as a result of the experimentation taking place in the sandbox.
Competent authorities must give sandbox participants regulatory guidance and an exit report detailing the activities carried out in the sandbox and the related results and learning outcomes, and, on request, written proof of the activities successfully carried out; a provider may use that documentation to help demonstrate compliance.
When LexLint raises it
When your app profile says your app trains models, generates content with AI or makes high-risk automated decisions.
Back to the example · Lint your app
Page updated .