On February 19, 2026, the National Data Protection Agency concluded the alignment stage of its Regulatory Sandbox Pilot on Artificial Intelligence and Data Protection, a mandatory phase under the public call preceding the testing of selected projects. The purpose of this stage was to harmonize the technical, legal and regulatory understanding of participating entities, ensuring a common foundation for the safe and responsible development of technological solutions within the supervised experimental environment. Conducted over a four-month period with institutional support from the University of São Paulo, the program included lectures, practical workshops and assessments addressing the structure and methodology of regulatory sandboxes, as well as comparative international experiences.
The curriculum covered key aspects of AI governance, including algorithmic transparency, explainability and the right to review decisions based solely on automated processing under Article 20 of the Brazilian General Data Protection Law, in addition to risk assessment and mitigation, impact analysis, system reliability, incident scenarios and cybersecurity safeguards. In the final stage, participants developed sandbox plans outlining monitoring, testing and discontinuation strategies, which were collectively reviewed for technical refinement. With the completion of the alignment phase, qualified institutions now proceed to the supervised testing stage, under the Agency’s oversight, as part of its broader initiative to promote responsible innovation and legal certainty in the digital ecosystem.