A Sandbox Can Switch Off UK Rules. It Cannot Switch Off the EU AI Act.

In the King's Speech on May 13, 2026, the UK government announced the Regulating for Growth Bill, which would put regulatory sandboxes on a statutory footing and let the government temporarily relax existing rules so firms can test AI and other emerging technologies in real-world conditions. The framing on offer contrasts a pro-innovation Britain with a Brussels bureaucracy marching toward a hard August compliance deadline. For cross-border financial firms, that contrast obscures more than it explains.

What the Bill does

Per the King's Speech briefing and legal analysis, the Bill is designed to strengthen a Growth Duty obliging regulators to actively support economic growth, and to create cross-cutting legal powers to temporarily relax existing rules inside a controlled sandbox environment. Osborne Clarke summarizes the sandboxes as letting businesses across the economy test innovative AI products safely in a real-world setting through the temporary relaxation of existing rules. Bird & Bird traces the lineage to the AI Growth Lab concept, following a January 2026 exercise in which the technology secretary wrote to 19 regulators asking each to publish a plan for enabling safe AI-powered innovation. The firm also notes that the rules to be disapplied have not been identified, though the likely candidates include certain requirements on data protection and financial services that are viewed as hindering business.

The question is not speed, it is who holds the switch

Much of the commentary will measure the UK against the EU on pace. The more consequential issue is constitutional. The mechanism contemplates ministers disapplying enacted rules through secondary legislation, with the reduced parliamentary scrutiny that route implies. That has drawn criticism from within Parliament. Lord Holmes, a member of the House of Lords, has publicly questioned whether the framework risks becoming an executive power grab rather than policy developed through public engagement and scrutiny. Bird & Bird raises the operational version of the same concern: who decides which laws are switched off, through what procedure, and with what red lines around consumer protection. For a regulated firm, the assurance that rules can be relaxed means little until it knows who can relax them, on what timetable, and how durably. A waiver granted by ministerial discretion carries a different risk profile than a stable statutory carve-out.

What this means for financial firms

The sandbox is better treated as a tactical instrument than a strategic foundation. It can be genuinely useful for generating live performance and risk data under direct regulatory supervision, which is the kind of evidence the FCA's separate evidence-first posture rewards. Three cautions apply. The relief is domestic, so cross-border obligations survive it intact and an EU-facing credit or insurance model still has to meet the AI Act on the AI Act's timeline. The relief is discretionary and potentially revocable through the same secondary-legislation route that creates it, which makes it a weak anchor for a multi-year compliance architecture. And the list of disapplicable rules has not been published, so a firm counting on financial-services relief specifically is relying on a detail that has not been written.

What's next

The Bill has entered the legislative program but is early in its passage. The substance that matters most — which rules can be relaxed and through what procedure — will be set in the detail and likely in secondary legislation rather than the headline text. Firms should watch for the scope of disapplicable rules, the consumer-protection red lines, and the procedural safeguards that survive the scrutiny debate Lord Holmes has opened. On the EU side, the markers are whether the Digital Omnibus is formally adopted before August 2 and what the revised high-risk timeline becomes.

AI compliance is no longer a single-jurisdiction problem, and a sandbox that relaxes one country's rules is a convenience rather than a strategy. The firms that come out ahead will build governance to satisfy the strictest regime they touch, then use sandboxes for what they do well, which is generating supervised evidence.