This article is published under a Creative Commons license and not by the author of the article. So if you find any inaccuracies, you can correct them by updating the article.


“Regulatory Sandboxes” in Russia: New Horizons and Challenges Creative Commons

Link for citation this article

Salikhov Damir R.

Цифровое право, Journal Year: 2020, Volume and Issue: №2, P. 17 - 27, https://doi.org/10.38044/2686-9136-2020-1-2-17-27

Published: July 20, 2020

Latest article update: Nov. 20, 2023

This article is published under the license

Link for citation this article Related Articles


“Regulatory sandboxes” are regarded as a special mechanism for setting up experimental regulation in the area of digital innovation (especially in financial technologies), creating a special regime for a limited number of participants and for a limited time. Russia has its own method of experimental regulation, which is not typical but may be helpful for other jurisdictions. There are three approaches to legal experiments (including digital innovations) in Russia. The first approach is accepting special regulation on different issues. There are recent examples of special laws (e.g. Federal Law on the experiment with artificial intelligence technologies in Moscow). An alternative to this option is establishing experimental regulation by an act of the Government if legislation does not prohibit it (e.g. labeling with means of identification). The second approach deals only with Fintech innovations and provides a special mechanism to pilot models of innovative financial technologies. The participants of such a “sandbox” may create a close-to-life model in order to estimate the effects and risks. If the model works fine, the regulation may be amended. The third approach works with creating a universal mechanism of real-life experiments in the sphere of digital innovations based on the special Federal Law and the specific decision of the Government of the Russian Federation or the Bank of Russia in the financial sphere. The author compares the three approaches and their implementation within the framework of Russian legislation and practice and concludes that this experience may be used by developing countries with inflexible regulation, in order to facilitate the development of digital innovations.


Digital law, regulatory sandbox, digital innovation, legal experiment, sandboxes, Russian experience

The idea of so-called “regulatory sandboxes" is not brand new; this approach is pretty common in the experimental regulation of digital innovations, especially fintech innovations.

A basic prerequisite for this institution is in the problem of the development of technologies happening faster than regulation (Fenwick, Wulf, 2017). Under these circumstances, the government is looking for ways to make regulation more flexible to assist with sustainable and effective develop­ment across different areas of the economy.

The motherland of “regulatory sandboxes" is the United Kingdom (the first “sandbox" was de­signed in 2016)1.

The same mechanisms exist in the Unites States of America (Allen, 2019), Australia2, Singapore3, the United Arab Emirates4, Hong Kong (Huang, Yang, Loo, 2020), Switzerland5, Thailand6, Indonesia7, Republic of Kazakhstan8, Bahrain9, Jordan10, Sierra Leone11, and a few other countries.

According to mass media, at least eight countries are working on the same idea - Brunei, the People's Republic of China, India, Kenya, Mexico, Mozambique, Nigeria, and Pakistan.

This diverse mix of countries shows that specific countries with different legal and political tra­ditions are interested in this institution. Undoubtedly, the list of countries will be broadened within a few years.

In general, the mechanism of “regulatory sandboxes" provides methods for testing new technol­ogies and business processes within the limited number of participants, followed by special legal prescriptions, which means either cancelling assorted mandatory requirements for the purposes of experiments, or developing special requirements and “individual" provisions. Both of these options have a limited period, which is necessary for checking up the new technology or business processes, and the effects of their implementation.

This mechanism is needed given the unpredictable consequences and risks herein, and is poten­tially useful for the business and social opportunities of using the testing technology or processes.

For instance, the state has some mandatory requirements for taxi drivers, including a daily medi­cal checkup and a special type of driving license. These requirements cannot be applied for a drone taxi, which has no human driver within the car but may have a "driver" outside observing the entire processes. Prohibiting this type of taxi only on the basis of not corresponding to some mandatory requirements seems unreasonable, yet society may not ready to prescribe this or that regulation for this type of taxi without research and testing. Both horns of this dilemma show the difficulties herein.

Under these circumstances, and due to the fact, that with no practical experience it is impossible to establish adequate regulation for most innovations, the government is seeking ways of how to try the new approaches without fundamental changes of legislation.

"Sandboxes" are the perfect mechanism for these purposes, since they are a framework (not typ­ical for other companies beside the current participants) set up by a regulator (e.g. a Central Bank in Fintech area) that allows "innovators" to conduct "live" experiments in a controlled environment under a regulator's supervision. In other words, this mechanism creates a controlled experiment, where the government and the participants are able to find the most balanced and fair legislation, minimizing the risks for public values and maximizing the positive effects.

Returning to the example of a drone taxi, the government may cancel some of the requirements and, at the same time, add other special requirements (e.g. for protecting pedestrians, for insuring liability including civil and criminal liability, for control of all drone taxis online, etc.) based on their risk analysis.

The metaphor of the "sandbox" is illustrative, as the entire experiment is limited to participants, technologies, applicable requirements, etc. Being under the supervision of the state, the "sandbox" may be converted on the basis of special regulations. Novel financial products, high technologies, and innovate business models or processes may be checked under a special set of norms, rules, and requirements, providing appropriate safeguards and protecting public interest.

This tool for the development of digital innovations is used in global practice (to a greater extent, it relates to the financial services market), and enables the reduction of the time and costs in intro­ducing innovative products and improving the relevant regulatory legal framework. Due to the fact that, from time to time, current regulation does not fully consider new practices and use of new tech­nologies, special legal regimes help to reduce legal uncertainty and legal risks for all participants.

In theory the idea is clear, but in practice there are many issues - tax policy, preventing of the risks for lives and health, the limits of converting the experimental regulation during the "sandbox" period, antitrust legislation, and so on.

Another issue is devoted to the areas of experimental regulation. Historically there was the only area - financial technologies (Bromberg, Godwin, Ramsay, 2017). However, some countries extended the mechanism to digital innovations in general (Wechsler, Perlman, Gurung, 2018).

In fact, there is not a commonly accepted notion of "digital innovation". This is another frequent is­sue, as whilst it is possible to outline the list of technologies that are novel and should have priority (e.g. big data, artificial intelligence) there are other technologies that cannot be considered novel but still are important for businesses and people yet simultaneously entail risk (e.g. city supervision systems, data bases of social services like the services of an operator of a postal service or telecom companies).

Typically, there are two approaches - limiting "sandboxes" to financial services, or providing a wider list of technologies that may be applicable for "sandboxes" in case of regulatory approval (on the basis of discretionary powers). Historically and traditionally, the first approach is more

applicable, but at the moment there are experiments with digital innovations in other areas (e.g. transport, medicine).

On the one hand, the COVID-19 pandemic may lead to the development of both digital innovation and “sandboxes", as within the pandemic, digital technologies are becoming increasingly important in new areas of social life, the economy, the state, and municipal administration (Efremov, Yuzhakov, 2020). The experimental nature of their introduction in new areas should be guaranteed by (within reason) clear and flexible legislation.

On the other hand, there are doubts about the effectiveness of flexible norms for balancing public interests and business strategies (Zezsche, Buckley, Arner, Barberis, 2017).

The Russian approach is not typical, and may be helpful for other jurisdictions. However, in order to estimate the actual effectiveness of the regulation and practical results, we need to wait at least a couple of years after the enforcement of the law and “sandboxes" in practice.

The Russian Federation has no special law on “regulatory sandboxes" at the moment. Instead, there are two approaches towards legal experiments (not only in digital area).

The first approach entails accepting special regulation on various issues.

There are three recent examples of special laws - the Federal Law on the experiment to establish a special regulation in order to create the necessary conditions for the development and implemen­tation of artificial intelligence technologies in Moscow12; the experiment in taxation for a special cat­egory of taxpayers (“professional income tax")13; the experiment of the use of electronic documents in employment relationship management14.

Another option is to establish the experimental regulation by an Act of Government, if the legis­lation does not prohibit it. This option was used for experiments with labeling of certain categories of goods (perfume and toilet waters, footwear, clothes, tobacco products, etc.) with means of iden­tification (by individual 2-D code for each item). Prior to the implementation of mandatory labelling in each category, under the decision of the Government, experiments were conducted for interested governmental, non-governmental, and business participants. There are a number of initiatives for experiments in different areas on the basis of bylaws.

The second approach is actively launching “sandboxes". Following in the footsteps of British col­leagues, in 2018 the Central Bank of the Russian Federation (subsequently - the Bank of Russia), within the framework of the implementation of the Basic Guidelines for Financial Technologies De­velopment for the period 2018-2020, launched its own “sandboxes"15.

This mechanism provides an opportunity to pilot innovative financial technologies and services on the financial market. Priority areas for piloting, according to the Bank of Russia policy, are Big Data and machine learning technologies, mobile technologies, artificial intelligence, biometric tech­nologies, distributed registry technologies, open interfaces, digital profile technologies, and others. Any organization that has developed or plans to use an innovative financial service or technology can initiate piloting in a “sandbox".

The main problem of this initiative is the absence of any legal background, which leads to limited opportunities of potential participants. In fact, a participant's most fruitful opportunity is to create a model of whichever process they prioritize, and to convince the regulator that it is safe and not risky from the perspective of protecting important public values. The regulator is able to initiate changes in legislation, but this process takes much time. This type of “sandbox" is not flexible and risky, since the opportunity of launching “live" experiments is not available.

Unfortunately, the Bank of Russia does not post official information about the number of applica­tions, decisions on them, and results of proposed “sandboxes". However, in February 2019, the Bank of Russia announced that the first project from the “sandbox" received legal approval. According to their official website, work on the project, which deals with the service that allows remote manage­ment of corporate client accounts for transactions in bank branches, began at least in August 2018. Sberbank (the largest bank in Russia, Central and Eastern Europe) was the initiator of this project. The testing was conducted jointly with professional associations of financial market participants and relevant government agencies. The Bank of Russia, as well as experts, found it expedient to launch the service taking into account recommendations provided by the regulator16.

This case demonstrates the potential mechanism, but there are at least two specific details. First, there was not any testing in real life, but only modeling by experts and agencies, so there remain potential risks in real life conditions that cannot be forecasted within the model. Second, the Bank of Russia found the service does not require amendments to legislation - it was legalized by a bylaw.

According to mass media there are about 20 applications for the Bank of Russia's “sandbox", but the official statistics is not available.

This “theoretical" option is only for banks and other financial institutions that are supervised by the Bank of Russia. The same option is not available for other companies and other services.

Within the framework of the Digital Economy National Program17, the Government of the Rus­sian Federation mandated the Ministry of Economic Development to establish “legislative regulation of the creation and functioning of special legal regimes in the digital economy (“regulatory sand­boxes")" by the end of July 2019.

With the short delay, in March 2020, Russian Ministry of Economic Development prepared a draft, agreed upon by all relevant federal executive agencies, of the Federal Law “On experimental legal regimes in the area of digital innovations in the Russian Federation"18; now this has been proposed by the Government to the State Duma, it may finally be approved by the end of the year.

However, the draft requires a satellite law with the details in relevant legislation (18 laws that should be amended are in the list of the Government), but this draft has not been prepared on time due to arguments within the federal agencies.

The key idea of the suggested regulation is pretty close to typical models considered above, and is under development within the experimental area, through which it will be able to do what is not quite allowed yet. If the experiment is successful, this regime will become the prototype of the new regulation across assorted areas of using digital innovation.

According to the draft, "regulatory sandboxes” will work in eight areas:

  1. medical practice, including telemedicine technologies, technologies for the collection and pro­cessing of information on citizens' health and diagnoses, pharmaceutical practice;

  2. design, manufacture, and operation of vehicles, including highly automated vehicles and un­manned aerial vehicles, certification of their operators, provision of transportation and logistics services, and the organization of transportation services;

  3. e-learning and distance learning technologies;

  4. financial markets;

  5. remote sale of goods, works, and services;

  6. architectural engineering, construction, major repair, reconstruction, demolition of capital construction objects, operation of buildings and structures;

  7. state and municipal services providing and executing state control and municipal control;


The legal experiment is supposed to be extended to systems based on digital innovations, includ­ing Big Data, blockchain, neurotechnology and artificial intelligence, quantum technologies, robotics, etc. However, the draft does not have the list of technologies - it uses the term "digital innovation” in its broader meaning (a new or highly improved product).

In order to legalize special bylaw norms that overrule legislation for "sandboxes”, the draft op­erates with two notions - general regulation (for all entities) and special regulation (for the partici­pants of a "sandbox” for the limited period of an experiment).

Surprisingly, the list of participants consists of not only legal entities and entrepreneurs, but also of governmental (federal and regional) bodies, municipal bodies (for monitoring and oversight activities), and state and municipal services. This provision seems illogical, as in this area the state is able to make such legislation flexible.

The key idea of the draft is to create a procedure for developing the special (experimental) regula­tion of up to three years for participants in using different digital innovation and connected processes.

As oppose to the Republic of Kazakhstan, where the special regulation works only within the As­tana International Financial Center19, the Russian legislator does not draw the limits for territory20 - "sandboxes” may work within the municipality, the region, or nationwide.

The draft creates a procedural mechanism for setting up, changing, cancelling, and monitoring “sandboxes". Under this mechanism, upon the application of an initiator or the request of the reg­ulator (e.g. the Ministry of Digital Development, Communications and Mass Media of the Russian Federation for telecommunication or postal services), the government and business community or­ganizations will be able to estimate the initiative and suggestions for the special regulation, and decide whether this regulation may be settled.

The initiator should provide the draft of the “sandbox" Program complete with an analysis of the risks, specific regulatory problems, and gaps that are considered to be boundaries for the implemen­tation of the digital innovation with no special regulation.

The final decision on the application or request is made by the Government of the Russian Fed­eration (of the Bank of Russia for its area of regulation) after the approval of two federal executive bodies (the regulator and “the designed in experimental legal regime" body) and a business commu­nity organization in the area of the experiment.

The procedural mechanism is clear and pretty democratic: it offers the opportunity to settle dis­putes and other disagreements, but the grounds of these decisions, as well as the authorities, are not transparent.

It is not obvious whether a business community organization is the only organization for all “sandboxes" or not; the criteria for this organization are not mentioned, and nor is the procedure of nominating whichever organization is chosen.

As the draft of the law declares, “sandboxes" will make it possible to check how a new technological solution works in real life within the special regulation, as well as to determine whether its universal use is acceptable and what requirements should be set when implementing it. The experiment includes assorted specific exemptions from mandatory requirements or special requirements for the participants of the “sandbox", in cases where there is a gap in regulation. The experiment may require the special in­currence of liability, but it is not mandatory. These exemptions, however, must not limit the level of pro­tection of the rights and freedoms of citizens, state security, and other important constitutional values.

Reduction of terms helps to both reduce costs and replicate new solutions. Moreover, it allows quickly sifting out failing business models.

According to the results of the experiment, the new regulation of innovation areas is formed by the regulatory bodies if the “sandbox" is successful.

However, the detailed prescriptions about the requirements to these special regulations are go­ing to be determined in relevant legislation (e.g. medical law for telemedicine services; transport law for drone taxis).

The advantage of suggested regulation is in the creation of the unified universal mechanism for “sandboxes" in all areas, and in detailed procedures with limited terms, authorities, and methods of decisions for each stage of approval. Moreover, this system is flexible enough, and not limited to financial services.

Meanwhile, the suggested mechanism has disadvantages and weaknesses that should be con­sidered.

There is also a theoretical issue - how to protect public order if the executive bodies are able to postpone (or even cancel) laws for the list of entities. The rule of law guarantees that legislation cannot be overruled by bylaws. However, it is important to remember the concept of “delegated legislation"21 - this theoretical challenge may be easily solved by special law on “sandboxes".

There are also practical issues that are important in the draft of federal law; three of these are the most urgent for consideration:

  1. Firstly, the proposed mechanism contains multiple corruption risks at all stages, as there are no criteria for decision-making. All discretionary powers have no limits and/or adequate criteria for any decisions they may make. In fact, this is not a big problem, but the absence of an effective and fast judicial review gives the authorities unlimited power for the purposes of the application processing. In theory the standard judicial mechanism is undoubtedly still available, but this may work only in cases of procedural major violations that are significant enough. However, the grounds of decisions are closed and their publication is not mandatory; this leads to no judicial review being conducted of them. Another point is the grounds for choosing the "business community organization", as designed for the purposes of "sandboxes" processing.

  2. Secondly, there are risks of unfair components and restricted commercial data disclosure dur­ing the application processing. Almost each digital innovation deals with new business processes and ideas that should not be disclosed. Another point is about the potential conflicts of interests of competing companies, and the opportunity to protect corporative interests only. The same problem is possible for startups and small companies with no representation in "a business community orga­nization". In practice (even with at least three bodies at the first stage), "sandbox" processing may be used as a way of competence at whichever market companies see as fit. The absence of a predictable level of protection of interests is a significant gap in the draft for initiators and their commercial data. According to the previous version of the draft of the law, the Federal Antimonopoly Service opinion was mandatory; this provision however was not included in the final governmental draft.

  3. Thirdly, business models are connected with other regulatory factors like taxation, licensing, and similar fields. Changing of legislation that affects the "sandbox" leads to the cancellation of it, according to the provisions of the draft of the Federal Law. On the one hand, this refers to the sovereignty of parliament and the law as the highest level of regulation. On the other hand, if the law comes into force, parliament will give the "mandate" to the Government or the Bank of Russia to exempt regulation for the limited period of time and limited list of participants. The previous version of the draft has the provision that the tax burden for participants of sandboxes cannot grow during the experiment; the current draft does not have this provision.

However, it looks like the Government does not plan to take "sandboxes" into force soon. Neither a draft of satellite law is ready, nor have the plans for preparing the draft for the second hearing at the State Duma been announced.

There is an idea to hold an experiment on settling "sandboxes" before or alongside changing the regulation. On June 16 2020, it was announced that the Ministry of Economic Development prepared the list of the projects that they are going to test as "sandboxes".

There are six initiatives in this list, including: the service to protect subscribers from fraudulent calls based on Big Data and machine learning (the main regulatory issue is in the special regime of call data); remote signing a cellular service agreement with no necessity to visit the office of the operator (there are regulatory gaps in the legislation on communication as well as counter-terrorism provisions); "smart hotels" with automatic check-in; cargo transportation with drones; autonomous driving system with drones (with no engineers operating the system); medical care services through telemedicine (there is a provision that requires the first offline doctor's appointment).

On June 16 2020, the draft of satellite law was published for the purposes of independent an­ti-corruption expertise22, but it is not final draft.

Unfortunately, the draft provides tailored solutions as it consists of the closed list of mandatory and other requirements that may be limited, cancelled, or modified within a “sandbox". This draft includes pretty brief regulations with amendments to 8 laws (in the areas mentioned above)23 with the lists of articles and provisions “which apply unless otherwise provided" by a “sandbox".

The analyzed Russian approaches are illustrative and may be helpful for other jurisdictions, espe­cially for developing countries that do not have the analogue experience.

The idea of “sandboxes" has already been added to by the new direction of regulatory develop­ment, which may be considered as “smart regulation" (Hohlov, Ershova, 2019), but these concepts are not competing - both of these institutions may be used simultaneously.

Moreover, if the regulation is rigid and not flexible enough (as is pretty typical for most post-Soviet countries, as well as a number of developing countries), “sandboxes" will help to improve legislation after testing all processes and requirements in real-life circumstances to facilitate the intensive and effective development of digital technologies and innovations.

The provisions of the suggested regulation may be changed dramatically during hearings in the Federal Assembly of the Russian Federation, but it is best to hope that the key ideas and approaches will be included in the law.

Time will tell how effective and appropriate this universal mechanism of “sandboxes" is to the reality of life and law in Russia.


  1. Allen, H. (2019). Regulatory Sandboxes. George Washington Law Review, 87(3), 579-645. https://doi.org/10.2139/ssrn.3056993

  2. Bromberg, L., Godwin, A., Ramsay, I. (2017). Fintech Sandboxes: Achieving a Balance between Regulation and Innovation. Journal of Banking and Finance Law and Practice, 28(4), 314-336. https://ssrn.com/abbstract=3090844

  3. Efremov, A., Yuzhakov, V. (2020). Experiments in the field of digital technologies under conditions of pandemic: potential, current state and problems [Experimenty v sfere tsyfrovykh tekhnolofiy v usloviyakh pandemii: potentsial, tekuschee sostoyanie i problimy]. Monitoring of the Economic Situation in Russia: Trends and Challenges of Social and Economic Development, 115(13), 31-38.

  4. Fenwick, M., Wulf, A., Vermeulen, E. (2017). Regulation Tomorrow: What Happens When Technology is Faster than the Law? American University Business Law Review, 6(3), 561-594. https://doi.org/10.2139/ssrn.2834531

  5. Hohlov, Yu., Ershova, T. (2019). Russian Digital Economy Program. IAC Online Journal CIO and Digital Innovation, 2(1), 35-38.

  6. Huang, R., Yang, D., Loo, F. (2020). The Development and Regulation of Cryptoassets: Hong Kong Experiences and a Comparative Analysis (2020). European Business Organization Law Review, 21, 319-347. https://doi.org/10.2139/ssrn.3544034

  7. Wechsler, M., Perlman, L., Gurung, N. (2018). The State of Regulatory Sandboxes in Developing Countries. New

  8. York: Columbia Institute for Tele-information. https://doi.org/10.2139/ssrn.3285938

  9. Zetzsche, D., Buckley, R., Arner, D., Barberis, J. (2017). Regulating a Revolution: From Regulatory Sandboxes to Smart Regulation. European Banking Institute Working Paper Series, 23(1), 31-103. https://doi.org/10.2139/ssrn.3018534.