The Sandbox

05 November 2020 Two innovations to help companies tackle financial crime are the latest results to come out of the sandbox. Both have been developed as part of the beta phase and follow the first two reports on Heathrow Airport and JISC which were published In July.

Onfido: Mitigating bias in customer identity verification 

• For example, a financial institution would likely use the technology to prove the identity of a customer who wants to open a bank account.
• That customer will be asked to provide a digital photo of their identity document and a selfie taken using a mobile phone or other device.
• If the identity verification check is successful, the customer will be able continue with the rest of the process.

Future Flow: Data flows

• Future Flow Research Inc provides an analytics platform which monitors the flow of funds in the financial system with the potential to combat financial crime.
• The platform enables financial institutions to contribute pseudonymised transactional data in bulk, enabling multiple financial institutions, Regulators, and agencies to work together to detect and ultimately tackle electronic financial crime.
• Organisations who are considering developing tools and services in data sharing and childrens privacy online can register their interest to take part in the next phase of the sandbox.

First reports published from the Regulatory Sandbox

• 23 July 2020 The first reports from participants in our regulatory sandbox have been published, revealing the outcomes of collaborations between the ICO and two of the organisations who were among the participants in the pilot phase of the scheme.
• This beta phase set out to road test the scheme ahead of a full launch.
• We were seven months in when the pandemic struck, impacting businesses and organisations across the board in different ways.
• These are the first two reports, the other projects from the beta phase are at earlier stages in the scheme and their reports will be published on completion.

JISC – Wellbeing Code of Practice

• JISC is a not-for-profit organisation serving the higher and further education and skills sectors.
• It champions the importance and potential of digital technologies for UK education and research.
• Within the sandbox, JISC has developed a Wellbeing Code of Practice with universities and colleges who want to investigate the use of student activity data to improve their provision of student support services, helping them protect both their privacy and wellbeing.

Heathrow Airport Ltd - Automation of the Passenger Journey programme

• Heathrow Airports Automation of the Passenger Journey programme aimed to streamline the passenger journey by using biometrics.
• Facial recognition technology would be offered at check-in, self-service bag drops and boarding gates to create a seamless experience for passengers travelling through the airport.

Review

• They have gained an insight into how data protection does not hinder innovation and how the two can work together.
• By working alongside us, they have also been able to help develop our views on compliance issues which have informed our own advice and guidance.
• This successful trial run, has given us the opportunity to introduce improvements ahead of the full launch.
• In the meantime, we are always keen to hear from you and if you have any enquiries please contact [email protected]

Work begins on creating ICO Sandbox short list as application period closes

• Applications for theICO Sandboxhave now closed and we have had a fantastic response, with 64 submissions received in total.
• Organisations have clearly put a good deal of thought into how they want to work with us to help ensure that their innovative projects using personal information can comply with data protection law.
• Our initial analysis suggests that there are many high quality, viable applications.

So what happens now?

• The sandbox team will carry out an initial triage sift process of each application, scoring them against ourselection criteria, before creating a short list.
• This will then go before an internal assessment panel for final decisions.
• So we have reached the end of the beginning and now the real, practical work begins in earnest.

Please get in touch with any Sandbox queries as deadline for applications approaches

• Since we opened the beta phase of our sandbox for applications at the end of March, we have had a great response.
• We can help explain the principles, the process and what is needed in more detail.
• We would like to take this opportunity to remind prospective applicants that the sandbox is open to organisations of all sizes and from all sectors.
• Early and direct engagement with the sandbox team can clear up any grey areas and will invariably lead to a stronger application.
• And that will lead to a potentially much better outcome for everyone concerned the organisation, the ICO and, ultimately, the UK public.
• The deadline for applications is noon on Friday 24 May.

New film sets out how organisations can benefit from ICO Sandbox

• We have had an excellent response since opening our ICO regulatory sandbox Intention to Apply Surveylast month but we still want to hear from more of you.
• Many organisations have already let us know they would like the ICOs help in ensuring that their new, innovative products and services comply with data protection law.
• We know there are many more particularly large companies, and organisations from the public and third sectors that are planning to apply to take part in the Sandbox but have yet to let us know.
• Depending on your organisations network policies, you may be unable to view the video on this page.
• In this case, please access the page on a non-network device.
• You can also find out more by reading our Discussion Paper, which sets out how we envisage the sandbox will work in practice, or by emailing our team at [email protected]

Discussion Paper and Intention to Apply Survey

• With that in mind, we have published our sandbox discussion paper which explains to potential participants how we see the sandbox working in practice.
• The paper sets out our thinking so far - from early engagement through to application, sandbox entry and, ultimately, exit.
• The paper will form part of the discussion at our sandbox workshop event in London on 6 February.
• Weve included discussion questions throughout the paper and are asking people to send their views to [email protected].
• To help us plan our resources and build the sandbox appropriately, we are also now opening our Intention to apply survey.
• The survey will remain open until we open for applications and is entirely voluntary and non-binding.

Date announced for consultation workshop

• 5 December 2018 Following our call for evidence and analysis of the submissions we received, work on the ICO Regulatory Sandbox continues with an event in the New Year to gather more detailed evidence, ideas and opinions.
• The consultation workshop will take place on 6 February 2019 in London and we are now accepting expressions of interest in attending.
• We are keen to get participation from innovators working with personal data and who might want to make use of our Sandbox, whether in the private, public or third sectors.

ICO analysing initial responses to regulatory sandbox project

• Weve had a really positive response, with nearly 70 organisations getting back to us including companies, trade associations, public authorities, third sector bodies and others.
• The quality of responses was really high, with lots of helpful suggestions and input, and we are grateful to all who gave their time to respond.
• Our analysis of these responses sets out some key themes that emerged and provides comment from us under each of the survey sections.
• For example, we suggest that the sandbox is likely to be broad in scope and open to any sector and any size of organisation.
• Further information on these events will be published in the ICO e-newsletter on December 6 and in an update on this blog.
• We remain committed to opening the sandbox, probably through a live beta phase, later next year.

Chris Taylor, a Head of Assurance at the ICO, blogs about how organisations can help us shape our regulatory sandbox.

• 26 September 2018 For a year or so now, weve been talking about our plans to create a regulatory sandbox.
• A place where organisations are supported to develop innovative products and services using personal data in different ways.
• Its not privacy or innovation, its privacy and innovation because organisations that use our sandbox wont be exempt from data protection law.
• They will have the chance to engage with us, take advantage of our expertise, seek our advice in mitigating risks and consult us on data protection by design.
• At the same time, and as youd expect, well be ensuring that appropriate protections and safeguards are in place.
• But weve a little way to go before we start inviting organisations to get involved.
• We know that companies and organisations are developing innovative products and services that use personal data in innovative ways.

We want to know:

It’s easy to share your views with us. Just click on the link to our survey and tell us what you think. If you want more information about the call for evidence, pleased email the team at [email protected].

• The Sandbox will also be home to the first Atari theme park on the blockchain Atari LAND!
• Players will have the option to use The Sandboxs SAND Tokens or Atari Tokens as currency when making purchases in Atari LAND.
• From this important portfolio of intellectual properties Atari delivers attractive online games for smartphones, tablets, and other connected devices.
• The Sandbox is a community-driven gaming platform that will allow creators to monetize voxel assets and gaming experiences on blockchain, allowing them to benefit from their creations.