UPDATE — SEPTEMBER 2025:
Since Peru first published its draft regulation for implementing the AI Act (Law No. 31814) in June 2024, the framework has now entered into force and is moving toward operational rollout. Following a public consultation that closed in August 2024, the government issued the final implementing regulation by supreme decree in January 2025. This version refined the definition of “high-risk AI systems,” aligning them more closely with the EU AI Act’s risk categories, and clarified the responsibilities of sectoral ministries.
One of the most important changes was the extension of the implementation deadline from 12 months to 18 months, giving organizations until mid-2026 to comply with requirements such as risk classification, transparency reporting, and secure data governance. The Secretariat of Government and Digital Transformation was confirmed as the central enforcement authority, with coordination across ministries like Health and Education to oversee sector-specific AI applications.
In May 2025, the government released a draft National AI Strategy, intended to sit alongside the regulation and Peru’s broader Digital Agenda 2030. The strategy sets sectoral roadmaps for deploying AI in healthcare, education, and justice, and is now under inter-ministerial review, with approval expected by the end of 2025. At the same time, Peru launched AI literacy and training programs in partnership with universities, focusing on ethics, auditing, and risk management to build capacity ahead of the compliance deadline.
The regulation is formally in force, though the binding compliance obligations will not apply until mid-2026. The National AI Strategy remains pending final approval, and additional sectoral guidance is anticipated in late 2025 to help organizations prepare. Peru is positioning itself as one of the first Latin American countries to move from principle-based AI policy into binding regulation with clear risk-based obligations, closely modeled on the EU’s approach.
ORIGINAL NEWS STORY:
Peru Advances Responsible AI Development with New Regulation
Peru has released a regulatory framework to implement its Artificial Intelligence Act (Law No. 31814), marking a major step in the country’s digital governance agenda. The regulation aims to guide the responsible use of AI across both public and private sectors, while aligning AI development with ethical principles, human rights, and sustainable development goals.
A Human-Centric and Risk-Based Framework
Published by the Presidency of the Council of Ministers, the regulation places strong emphasis on ethical AI development and risk management. It adopts a human-centric approach designed to improve transparency, accountability, and public trust in AI systems.
The framework applies broadly to government agencies, private companies, and civil society organizations. It seeks to encourage innovation while ensuring that AI use respects privacy, avoids discrimination, and supports equitable growth.
Core Principles of Peru’s AI Regulation
The regulation establishes several guiding principles for AI development and deployment.
Human dignity and ethical development sit at the center of the framework. AI systems must respect human rights and democratic values throughout their lifecycle.
A risk-based approach classifies AI systems into four categories: unacceptable, high, medium, and low risk. These categories determine the level of oversight and control required.
Transparency and privacy play a key role. Developers and deployers must provide meaningful information about how AI systems function, while complying with data protection laws.
Sustainability also factors into the framework. The regulation considers environmental and social impacts, aligning AI development with the United Nations Sustainable Development Goals.
National Oversight and Governance
The regulation designates the Secretariat of Government and Digital Transformation as Peru’s national AI authority. This body will oversee AI initiatives, guide implementation, enforce ethical standards, and monitor compliance across sectors.
Sectoral coordination will support this role, especially in areas where AI applications affect public safety and fundamental rights.
High-Risk and Prohibited AI Uses
The regulation draws clear boundaries around unacceptable AI practices. It bans systems that manipulate human behavior, violate privacy, or promote discrimination.
High-risk AI applications include systems used in critical infrastructure, healthcare, education, and public services. These applications face stricter obligations, including detailed risk assessments, secure data governance, and enhanced transparency requirements.
Building Capacity Through Education and Innovation
Beyond compliance, the regulation promotes AI literacy and workforce development. It encourages education initiatives that emphasize ethical use, inclusion, and responsible innovation.
The framework also supports collaboration among universities, industry, and government. These partnerships aim to strengthen research, innovation, and institutional capacity in AI governance.
Implementation Timeline and Next Steps
The regulation requires implementation within one year. In parallel, Peru plans to develop a National AI Strategy and a National Data Governance Strategy to provide long-term direction.
Together, these efforts position Peru as an emerging leader in responsible, risk-based AI governance in Latin America.
Need Help?
If you’re wondering how Peru’s version of the EU AI Act, or any other bill around the world, could impact you, don’t hesitate to reach out to BABL AI. Their Audit Experts are ready to provide valuable assistance while answering your questions and concerns.
