Law / European Union

AI Act, Article 57 (national AI regulatory sandboxes)

Regulation (EU) 2024/1689, Article 57

An AI governance rule binding government bodies.

Criminal exposure
No
Private right of action
No
Obligation class
Governance
Audit expectation
none

What it requires

  • This duty takes effect on (Article 57(1), first subparagraph, as replaced by Regulation (EU) 2026/1744): each Member State's competent authorities must have at least one AI regulatory sandbox operational at national level by then, a year after the Regulation's general date of application of under Article 113.
  • This is a Member State duty to establish infrastructure, not a duty on an AI provider or deployer. If you are a provider or prospective provider, you may apply to participate in your Member State's AI regulatory sandbox once established, but nothing in this Article requires you to.
  • A provider or prospective provider that follows its agreed sandbox plan and the competent authority's guidance in good faith is not fined under this Regulation, or under other Union or national law actively supervised within the sandbox, for the conduct the sandbox covers. It remains liable under applicable Union and national liability law for any damage inflicted on third parties as a result of the experimentation taking place in the sandbox.

These lines are LexLint's reading of the law's text. Also read by: European Commission (guidance, recorded ).

Who enforces it

Settledness

As of
Guidance link
https://ai-act-service-desk.ec.europa.eu/en/faq?page=5
Guidance body
European Commission
Open questions
Must a Member State have a national AI regulatory sandbox in place by , as the Commission's questions and answers say, or by , as Article 57(1) now reads?

What it makes you log

Who may demand the log

Regulator, Public

Logging duty

National competent authorities, not providers or deployers, must submit annual reports on a sandbox's progress and results to the AI Office and the Board, and make the reports or an abstract public. This is a government-to-government reporting duty rather than a provider or deployer record-keeping duty.

Kind
Explicit
As of
Provision
Article 57(16)
Trigger
all_systems

Also on the record

EEA status

Status
Pending
Source link
https://www.efta.int/eea-lex/32024r1689

What this law does

Drafted with AI

Drafted with AI from the cited sources under the direction of UnGovr staff. UnGovr holds editorial responsibility for this page. How this site is made

Research summary

Legal information, not legal advice. This is LexLint's own research summary of a public legal source, and it creates no attorney-client relationship. For decisions that matter, consult qualified counsel in the relevant jurisdiction. About LexLint

Each Member State must ensure that its competent authorities establish at least one AI regulatory sandbox at national level, operational by , a date the Digital Omnibus on AI (Regulation (EU) 2026/1744, in force since ) moved back one year from the original deadline; a Member State may instead participate in another Member State's sandbox if that gives equivalent national coverage.

A sandbox provides a controlled environment for developing, training, testing and validating innovative AI systems before they are placed on the market, under a plan agreed with the competent authority, and may include supervised real-world testing.

Article 57 creates no duty on a provider or a deployer: participation is voluntary, and a participating provider or prospective provider that follows its sandbox plan and the competent authority's guidance in good faith is shielded from an administrative fine under this Regulation, and from a fine under other Union or national law actively supervised in the sandbox, for the conduct the sandbox covers.

Such a participant remains liable under applicable Union and national liability law for any damage inflicted on third parties as a result of the experimentation taking place in the sandbox.

Competent authorities must give sandbox participants regulatory guidance and an exit report detailing the activities carried out in the sandbox and the related results and learning outcomes, and, on request, written proof of the activities successfully carried out; a provider may use that documentation to help demonstrate compliance.

When LexLint raises it

When your app profile says your app trains models, generates content with AI or makes high-risk automated decisions.

Back to the example  ·  Lint your app

Page updated .