UPDATE — SEPTEMBER 2025: Since Peru first published its draft regulation for implementing the AI Act (Law No. 31814) in June 2024, the framework has now entered into force and is moving toward operational rollout. Following a public consultation that closed in August 2024, the government issued the final implementing regulation by supreme decree in January 2025. This version refined the definition of “high-risk AI systems,” aligning them more closely with the EU AI Act’s risk categories, and clarified the responsibilities of sectoral ministries.

One of the most important changes was the extension of the implementation deadline from 12 months to 18 months, giving organizations until mid-2026 to comply with requirements such as risk classification, transparency reporting, and secure data governance. The Secretariat of Government and Digital Transformation was confirmed as the central enforcement authority, with coordination across ministries like Health and Education to oversee sector-specific AI applications.

In May 2025, the government released a draft National AI Strategy, intended to sit alongside the regulation and Peru’s broader Digital Agenda 2030. The strategy sets sectoral roadmaps for deploying AI in healthcare, education, and justice, and is now under inter-ministerial review, with approval expected by the end of 2025. At the same time, Peru launched AI literacy and training programs in partnership with universities, focusing on ethics, auditing, and risk management to build capacity ahead of the compliance deadline.

The regulation is formally in force, though the binding compliance obligations will not apply until mid-2026. The National AI Strategy remains pending final approval, and additional sectoral guidance is anticipated in late 2025 to help organizations prepare. Peru is positioning itself as one of the first Latin American countries to move from principle-based AI policy into binding regulation with clear risk-based obligations, closely modeled on the EU’s approach.

ORIGINAL NEWS STORY:

Peru Advances Responsible AI Development with New Regulation

In a significant move to harness artificial intelligence (AI) for national progress, Peru has released its regulatory framework for implementing the country’s AI Act (Law No. 31814). The regulation aims to promote AI’s responsible use across public and private sectors, aligning with ethical principles, human rights, and sustainable development goals.

The regulation, published by the Presidency of the Council of Ministers, establishes comprehensive guidelines to integrate AI into Peru’s digital transformation efforts. It emphasizes ethical development, risk management, and a human-centric approach to AI systems. These measures seek to enhance transparency, accountability, and societal trust in AI technologies.

Applicable to government agencies, private enterprises, and civil society organizations, the regulation sets a foundation for fostering innovation while ensuring that AI adoption respects data privacy, prevents discrimination, and promotes equitable development.

The regulation outlines several core principles:

• Human Dignity and Ethical Development: AI must uphold human rights and democratic values throughout its lifecycle.

• Risk-Based Approach: Applications are classified by risk levels—unacceptable, high, medium, and low—to guide their development and use.

• Transparency and Privacy: AI systems must provide clear insights into their functionality, and data privacy laws must be strictly adhered to.

• Sustainability: Environmental and social impacts are considered during AI application development, aiming for alignment with the United Nations Sustainable Development Goals.

The regulation designates the Secretariat of Government and Digital Transformation as the national authority to oversee AI initiatives. This body will guide the development and application of AI, enforce ethical standards, and monitor compliance.

Specific AI applications are categorized by their potential risks to public safety and human rights:

• Unacceptable Risks: Applications that manipulate behavior, violate privacy, or promote discrimination are strictly prohibited.

• High Risks: Applications impacting critical infrastructure, healthcare, education, and public services are subjected to rigorous evaluation and safety measures.

Mandatory actions for high-risk applications include detailed risk assessments, secure data management, and comprehensive transparency protocols.

The regulation encourages educational initiatives to foster AI literacy, emphasizing ethical use and inclusivity. It also supports collaborative research and innovation through partnerships among academia, industry, and government.

The regulation mandates that its provisions be implemented within one year. Concurrently, a National AI Strategy and a National Data Governance Strategy will be developed to provide long-term guidance.

Need Help?

If you’re wondering how Peru’s version of the EU AI Act, or any other bill around the world, could impact you, don’t hesitate to reach out to BABL AI. Their Audit Experts are ready to provide valuable assistance while answering your questions and concerns.