The Regulatory Sandbox and the Cybersecurity Challenge: from the Artificial Intelligence Act to the Cyber Resilience Act

Abstract

The article carries out an analysis of the innovative tool known as “regulatory sandbox”, investigating its specific features in both abstract and concrete terms through the investigation of relevant European use cases. Through the analysis of the application of the regulatory sandbox in the specific field of the regulation of artificial intelligence, with particular reference to the discipline envisaged by the European regulation proposal called “Artificial Intelligence Act”, the article aims at verifying the possible applications and implications of this instrument also in the field of cybersecurity, with a specific focus on the recent European regulation proposal still under negotiation called “Cyber Resilience Act”.