Germany's ReguLab Sandbox Aims to Balance Innovation and Data Protection
Germany remains Europe's leader in innovation, with around 25,000 patent applications filed in 2024. Yet many companies argue that strict data protection laws are slowing down progress. At the same time, EU citizens continue to voice concerns over data security.
To address these challenges, a new regulatory sandbox called ReguLab has launched. It aims to help developers create innovations that comply with data protection rules while still pushing boundaries in technology. The ReguLab was introduced by Louisa Specht-Riemenschneider and Dr. Linda Bienemann at the HPI Digital Health Innovation Forum. Designed as a regulatory sandbox, it supports projects facing complex data protection issues under the GDPR and Germany's Federal Data Protection Act. The initiative draws inspiration from the UK's Information Commissioner's Office (ICO), which serves as an international benchmark for similar programmes.
The first call for proposals focuses on health risk detection under §25b SGB V. By the end of 2024, 42 concrete project applications had already been submitted. Teams with clear use cases and defined technology goals are invited to apply, particularly those grappling with fundamental data protection questions.
Selected projects will receive guidance from experts at the Bundesbeauftragter für den Datenschutz und die Informationsfreiheit (BfDI) over several months. Participants will get a confidential final report, while a public ReguLab Report will share broader insights to benefit future projects. The ReguLab offers a structured way for innovators to navigate data protection laws without stifling creativity. With 42 applications already in for its first health-focused call, the programme is set to provide practical solutions for balancing compliance and technological advancement. The results could shape how Germany—and Europe—handles innovation in tightly regulated sectors.
