Malaysia - National AI Sandbox Pilot

AI Sandbox 2024 (National AI sandbox pilot programme)

Malaysia

RAI-MY-NA-AS2NAXX-2024
Effective: April 18, 2024
In Force(In Force)
PolicyGovernance and OversightSafety, Testing, and EvaluationConformity Assessment and Registration
Export PDF

AI Sandbox 2024 is a national pilot programme launched on 18 April 2024 under Malaysia's National Technology & Innovation Sandbox (NTIS) to support AI testing, capacity building and commercialization in collaboration with MRANTI, MOSTI, MOHE and industry partners such as NVIDIA. The pilot aims to accelerate AI startups, talent development and real-world testing while coordinating governance, safety testing and conformity pathways under a ministerial-led initiative.

Summary

AI Sandbox 2024 (the AI Sandbox pilot programme) is a national pilot framework launched on 18 April 2024 by the Ministry of Science, Technology and Innovation (MOSTI) and operationalised through the National Technology & Innovation Sandbox (NTIS) with the Malaysian Research Accelerator for Technology & Innovation (MRANTI) acting as lead secretariat. The programme is a public-private partnership that engages industry technology partners (notably NVIDIA as announced at launch), higher education institutions and government stakeholders to provide a controlled testing and acceleration environment for AI solutions. The announced near-term objectives include facilitating the establishment of up to 900 AI startups and cultivating more than 13,000 AI talents by 2026, and contributing to longer-term national goals such as incubating 100 AI companies to generate significant revenue by 2030.

The pilot emphasises real-world trialling of AI systems under NTIS mechanisms — which provide regulatory flexibilities and structured testbeds for emerging technologies — while ensuring oversight, safety evaluation and capacity-building. The AI Sandbox is designed to bridge gaps between R&D and commercialisation, providing access to compute resources, lab environments, mentorship, and industry validation pathways. It also aims to improve coordination across ministries (MOSTI and the Ministry of Higher Education), research institutions and industry, supporting workforce development through training and curriculum partnerships.

Although framed as an innovation and economic growth instrument, the AI Sandbox pilot also acknowledges regulatory and governance requirements: participating entities are expected to comply with existing laws (data protection, sectoral regulation) and to adopt best-practice safeguards for privacy, cybersecurity, transparency and accountability. The programme does not replace statutory regulation; rather, it offers a supervised environment to test safety, conformity and market-readiness and to inform future policy. Oversight responsibilities are shared across MOSTI, NTIS/MRANTI and relevant sector regulators, with reporting, monitoring and evaluation mechanisms planned for the pilot phase. The pilot has been publicised in official ministerial and MRANTI releases and widely covered in Malaysian press, and it functions as an early-stage national instrument to coordinate AI innovation, assess technical and social risks, and align domestic practice with international developments in AI governance.

Full article

Read full text ↗

Overview

The AI Sandbox 2024 pilot programme was launched on 18 April 2024 as a collaborative initiative led by the Ministry of Science, Technology and Innovation (MOSTI) and operationalised under the National Technology & Innovation Sandbox (NTIS), with the Malaysian Research Accelerator for Technology & Innovation (MRANTI) functioning as the lead secretariat. The launch announcement emphasised public–private cooperation with strategic technology partners, including NVIDIA, to provide compute, labs and capacity-building resources. The pilot aims to accelerate the development and commercialisation of AI solutions by offering a supervised environment for testing, mentoring and market validation while coordinating with higher education and industry partners to scale talent and startups. For the official event announcement see NTIS event page and the MRANTI press release at MRANTI: AI Sandbox launch with NVIDIA.

Definitions

This framework uses working definitions adapted from the NTIS pilot context: "AI Sandbox" means the supervised test environment and associated support services for validating and scaling AI systems in real-world conditions; "Participant" means any startup, research group, company or public entity admitted to the pilot; "Lead Secretariat" refers to MRANTI as the operational manager under NTIS; "Programme Sponsor" refers to MOSTI as the policy sponsor; "Technology Partner" refers to private sector collaborators providing platforms, compute or labs (e.g., NVIDIA); and "Conformity Assessment" refers to planned evaluation steps for safety, privacy and sectoral compliance prior to broader market deployment. The pilot explicitly sits alongside existing sector laws (e.g., data protection) rather than supplanting them.

Governance and Institutional Framework

Governance for the AI Sandbox pilot is multi-institutional. MOSTI acts as programme sponsor and policy lead while MRANTI/NTIS operate as the lead secretariat and implementer, coordinating partner networks, applications, selection, lab access and monitoring. The Ministry of Higher Education (MOHE) is engaged for talent and academic collaborations. Sectoral regulators retain statutory oversight for regulated domains (e.g., healthcare and finance), and the NTIS governance model provides the administrative mechanism to grant time‑bound testing flexibility under controlled conditions. The official MOSTI announcement describing the programme is available at MOSTI: Program Perintis Kecerdasan Buatan (AI) Sandbox.

Key Focus Areas

The pilot concentrates on several core programmatic priorities: (1) Innovation acceleration — providing incubation and technical resources to translate prototypes into market-ready products; (2) Talent development — partnering with higher education and industry to train and place AI practitioners (the government announced a target of 13,000 new talents by 2026); (3) Startup creation and scale-up — supporting up to 900 AI startups by 2026 through cohorts, mentorship and investor linkages; (4) Real-world safety testing and evaluation — enabling controlled, supervised testing of AI models against operational data and contexts under NTIS safeguards; (5) Conformity and governance learning — piloting evaluation methods and compliance checklists to inform future national AI policy; and (6) International collaboration — leveraging partnerships (e.g., NVIDIA) to align technical capabilities and pathways to commercialization. These focus areas are consistent with the NTIS mission to accelerate regulated innovation while preserving public interest and sectoral oversight.

Implementation Framework

Implementation is staged under NTIS procedures: outreach and call for applications, selection and admission of cohorts, provisioning of technical infrastructure (labs, compute and testbeds), supervised trials, monitoring and iterative evaluation, followed by market-readiness support and investor matchmaking. MRANTI coordinates partner networks and daily operations, while MOSTI provides policy guidance and stakeholder coordination. Industry partners provide specialised capabilities (e.g., GPU access, model optimisation tools), and MOHE supports talent pipelines and academic collaborations. The pilot’s operational rules require participants to register, agree to data-handling and safety protocols, and submit periodic progress reports to MRANTI/NTIS for review.

Monitoring and Evaluation

Monitoring combines quantitative KPIs (number of startups incubated, talent placements, demonstrable pilots completed, investment raised) with qualitative safety and governance assessments (privacy incident reports, ethical reviews, third‑party conformity evaluations). MRANTI/NTIS will aggregate cohort progress data and report to MOSTI. The pilot is intended to produce evaluative evidence to shape subsequent national AI policy and regulatory tools. Performance metrics announced at launch include targets through 2026 for startups and talent; these will be tracked by the lead secretariat and publicised in programme updates.

Penalties, Liability, and Appeals

As a pilot framework rather than primary legislation, the AI Sandbox enforces compliance through programme-level measures: suspension or removal from the sandbox for breaches of programme rules, revocation of access to lab resources, repayment or withdrawal of programme support, and referral to statutory regulators where violations implicate sector laws (for example, breaches of the Personal Data Protection Act or sectoral licensing rules). Participants retain legal liability under existing laws for harm caused by their systems. Appeals mechanisms for programme decisions are managed administratively by NTIS/MRANTI with escalation to MOSTI where appropriate; participants may also pursue statutory appeals in applicable regulatory tribunals when relevant.

Relationship to Other Instruments

The AI Sandbox pilot operates under the NTIS umbrella and complements existing national instruments rather than replacing them. It is designed to inform national AI policy, future regulatory frameworks, and national initiatives such as Malaysia’s national cloud policy and the national AI office initiatives announced later in 2024. Existing laws on data protection, intellectual property, consumer protection and sectoral licensing remain operative; the sandbox provides a policy learning environment to pilot conformity assessment approaches and operational safeguards in cooperation with sector regulators.

International Alignment

Programme partners and sponsors have articulated alignment goals with international best practice in AI governance, leveraging private sector technology partnerships to import technical standards and evaluation approaches. The Sandbox is intended to be interoperable with international collaborations for research and commercialisation and to help Malaysia align its future AI regulatory approach with global norms on safety, transparency and accountability. The programme announcement highlights cooperation with global AI players and positions the sandbox to inform Malaysia’s participation in cross-border AI standards discussions.

Implementation Timeline

MilestoneDateNotes
Official launch event2024-04-18Launch at MRANTI Park; MOSTI and MRANTI announced partnership with NVIDIA.
Pilot cohort intake (virtual phase begins)2024 Q2Initial onboarding of early-stage AI startups and projects.
Interim evaluation and KPIs review2025-04-1812-month review to assess progress against targets (startups, talent).
Target checkpoint for startup & talent objectives2026-12-31Target year for up to 900 startups and ~13,000 new AI talents as publicised.

Sources and References

SourceType
AI Sandbox launch with NVIDIA (MRANTI press release)Primary Source
NTIS: Launching of Artificial Intelligence (AI) Sandbox ProgrammePrimary Source
MOSTI: Program Perintis Kecerdasan Buatan (AI) SandboxPrimary Source

Requirements for a company

What an organisation has to do under Malaysia - National AI Sandbox Pilot, at a glance. Not legal advice — the table below gives the provision and deadline for each item.

Must do

9
  • Comply with all existing sector laws, including data protection and licensing.Participants in the AI Sandbox pilot.
  • Register for the AI Sandbox pilot and secure acceptance.All entities seeking to participate in the AI Sandbox.
  • Agree to and adhere to all specified data-handling and safety protocols.Participants in the AI Sandbox pilot.
  • Implement robust data protection and privacy safeguards.Participants in the AI Sandbox pilot.
  • Document security measures and model robustness practices.Participants in the AI Sandbox pilot.
  • Submit an ethical review or risk assessment for high-impact pilots.Participants in the AI Sandbox pilot, especially for high-impact systems.
  • +3 more in the table below

Must not do

0

Nothing in this category.

Should do

0

Nothing in this category.

Should not do

0

Nothing in this category.

Who must do what

The obligations under Malaysia - National AI Sandbox Pilot, most serious first. Not legal advice — verify against the official text before relying on it.

#WhoRequirementBy whenWhereSeverity
1Participants in the AI Sandbox pilot.Comply with all existing sector laws, including data protection and licensing.
Existing laws on data protection... and sectoral licensing remain operative.
ContinuouslyCritical
2All entities seeking to participate in the AI Sandbox.Register for the AI Sandbox pilot and secure acceptance.
Application to NTIS/MRANTI and acceptance
Before participatingCritical
3Participants in the AI Sandbox pilot.Agree to and adhere to all specified data-handling and safety protocols.
The pilot’s operational rules require participants to... agree to data-handling and safety protocols.
Before commencing trialsCritical
4Participants in the AI Sandbox pilot.Implement robust data protection and privacy safeguards.
Data protection and privacy safeguards implemented
Before commencing trialsCritical
5Participants in the AI Sandbox pilot.Document security measures and model robustness practices.
Security and model robustness practices documented
Before commencing trialsImportant
6Participants in the AI Sandbox pilot, especially for high-impact systems.Submit an ethical review or risk assessment for high-impact pilots.
Ethical review / risk assessment submitted
Before commencing trialsImportant
7Participants in the AI Sandbox pilot.Submit periodic progress reports to MRANTI/NTIS for review.
Periodic reporting to MRANTI/NTIS
Periodically, as requiredImportant
8Participants in the AI Sandbox pilot.Engage in controlled, supervised real-world safety testing of AI models.
Real-world safety testing and evaluation — enabling controlled, supervised testing of AI models.
During the pilot phaseImportant
9Participants in the AI Sandbox pilot.Undergo planned conformity assessments for safety, privacy, and sectoral compliance.
Conformity Assessment" refers to planned evaluation steps for safety, privacy and sectoral compliance prior to broader market deployment.
Prior to broader market deploymentImportant

© Regulations.AI · updated on 13-Jun-2026