IMY’s Regulatory Sandbox Opens New Opportunities for the Security Industry

The Swedish Authority for Privacy Protection (IMY) has just launched a new regulatory sandbox project. The initiative is carried out in collaboration with Familjens Jurist and will focus, among other things, on how personal data can be further processed to develop and use AI. A project in the regulatory sandbox typically runs for about 6–8 months and concludes with a public report.

Learning and knowledge sharing at the core

“Our sandbox is a working method that allows others to benefit from the insights gained in our innovation projects while enabling IMY to learn about new technologies, such as AI,” says Per Nydén, acting head of unit at IMY’s innovation hub. Through the sandbox, IMY aims to help create better conditions for privacy-respecting innovation and sustainable technological development.

Dialogue-based guidance on data protection

IMY was the first Swedish authority to test a regulatory sandbox. This approach provides innovators and operational developers with dialogue-based guidance on data protection issues when the legal situation is unclear. Since 2022, the sandbox has been an integrated part of the authority’s innovation work.

Next opportunity to participate: autumn 2025

Applications of interest for the next project are open from 3 April to 19 May, with project start in September. For more information and to register interest, visit imy.se/sandlada.