---
authoritative: false
representation: annotated-page
publisher: AstroKube
methodology: https://ai-act.astrokube.com/about/
source_verified_on: '2026-09-15'
site_content_updated_on: '2026-09-15'
title: Recital 140 | EU AI Act | AstroKube
description: 'Recital 140, EU AI Act: This Regulation should provide the legal basis for the providers and prospective providers in the AI regulatory sandbox to use…'
language: en
source: https://ai-act.astrokube.com/law/recital-140/
---

1.  [Start](https://ai-act.astrokube.com/)
2.  [The law](https://ai-act.astrokube.com/law/)
3.  Recital 140

# Recital 140

This is a recital of the 2024 act: interpretive context for the operative articles, not operative law itself.

▼ Primary text, verbatim. Our annotations appear below, visibly separated.

This Regulation should provide the legal basis for the providers and prospective providers in the AI regulatory sandbox to use personal data collected for other purposes for developing certain AI systems in the public interest within the AI regulatory sandbox, only under specified conditions, in accordance with Article 6(4) and Article 9(2), point (g), of Regulation (EU) 2016/679, and Articles 5, 6 and 10 of Regulation (EU) 2018/1725, and without prejudice to Article 4(2) and Article 10 of Directive (EU) 2016/680. All other obligations of data controllers and rights of data subjects under Regulations (EU) 2016/679 and (EU) 2018/1725 and Directive (EU) 2016/680 remain applicable. In particular, this Regulation should not provide a legal basis in the meaning of Article 22(2), point (b) of Regulation (EU) 2016/679 and Article 24(2), point (b) of Regulation (EU) 2018/1725. Providers and prospective providers in the AI regulatory sandbox should ensure appropriate safeguards and cooperate with the competent authorities, including by following their guidance and acting expeditiously and in good faith to adequately mitigate any identified significant risks to safety, health, and fundamental rights that may arise during the development, testing and experimentation in that sandbox.

This text is meant purely as a documentation tool and has no legal effect. The Union's institutions do not assume any liability for its contents. The authentic versions of the relevant acts, including their preambles, are those published in the Official Journal of the European Union and available in EUR-Lex.

## If you would rather not read the law

The basics page explains the Regulation's own categories in order: scope, role, tier, date. The engineering view groups the obligations by the platform capability they demand.

[Start with the basics →](https://ai-act.astrokube.com/basics/) [Open the engineering view →](https://ai-act.astrokube.com/engineering/)

## About this provision

### Type

Recital

### Amended by

Not amended

### Cited capture

regulation-2024-1689/en-2026-08-18.html sha256 8f0b656302f9864c…

[Authentic text (EUR-Lex) →](http://data.europa.eu/eli/reg/2024/1689/oj) [This version (EUR-Lex) →](https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32024R1689)

### Machine readable

[/law/recital-140.md](https://ai-act.astrokube.com/law/recital-140.md) [/api/law.json](https://ai-act.astrokube.com/api/law.json)

### Found an error?

[Write to us →](https://astrokube.com/contact)