The ICO’s Sandbox is a new service designed to support organisations using personal data to develop products and services that are innovative and have demonstrable public benefit.
The beta phase of the Sandbox, which is now open to applications, will enable participants to work through how they use personal data in their projects with the ICO’s specialist staff to help ensure they comply with data protection rules. The Sandbox will also provide some comfort from enforcement action and, where feasible, increased public reassurance that innovative products and services are not in breach of data protection legislation.
The ICO says that the Sandbox beta phase offers a free, professional, fully functioning service for approximately ten organisations, of varying types and sizes, across a number of sectors. The ICO will consider applications from start-ups, SMEs and large organisations, across private, public and voluntary sectors.
The ICO will assess applications on the basis of whether the product or service being developed is innovative and can provide a potential demonstrable benefit to the public. Public benefit will be determined in terms of both breadth – the amount of people benefitting – and depth – the extent to which they benefit.
The ICO expects that many of the products that will come into the Sandbox will be at the cutting edge of innovation and may be operating in particularly challenging areas of data protection where there is genuine uncertainty about what compliance looks like. As a result, Sandbox participants may become use cases from which the ICO anticipates change and develops public guidance and resources on compliance.
Successful organisations will receive an on-site visit from a dedicated Sandbox team member, who will then work with them to devise and implement a bespoke Sandbox plan. Organisations will exit the Sandbox by September 2020 when the beta phase is planned to finish.