The OECD.AI Policy Navigator

Our policy navigator is a living repository from more than 80 jurisdictions and organisations. Use the filters to browse initiatives and find what you are looking for.

Sandkëscht — Regulatory Sandbox


-
Added by:   National contact point
Added on:   29 Apr 2026
Updated by:   OECD analyst
Updated on:   17 May 2026

Sandkëscht is a regulatory sandbox launched by Luxembourg's National Commission for Data Protection. Open to any entity established in Luxembourg regardless of size or sector, it provides a dedicated environment for testing projects involving new technologies, particularly artificial intelligence systems, while ensuring compliance with data protection principles. Participation lasts generally between 9 and 18 months.

Name in original language

Sandkëscht — Bac à Sable Règlementaire

Initiative overview

The programme operates according to five guiding principles: proactivity, to anticipate risks related to data management in AI; collaboration, through open dialogue between organisations and CNPD agents; experimentation, to test new technologies and approaches; agility, through an iterative approach to identify and resolve data protection issues early; and result-orientation, focused on achieving privacy-respecting, regulation-compliant innovation.

The sandbox follows a structured four-step mechanism: defining objectives and success criteria, evaluating alternative approaches, implementing actions, and monitoring progress. The CNPD does not provide IT infrastructure, the participating organisation retains full responsibility for its own systems throughout the experimentation. 

Information exchanged between the CNPD and participating organisations is treated confidentially.