Regulationsby GlyphPeru AI Law and Regulation
In force Peru · In force Jan 20, 2026 · next deadline Sep 10, 2027 (in 10 months)
Deadlines
Coming up
Private sector: transport, commerce, labourObligations apply two years after publication.
Private sector: production, agriculture, energy, miningObligations apply three years after publication.
Private sector: all other usesObligations apply four years after publication.
Already passed
Private sector: health, education, justice, security, financeHigh-risk and related obligations apply one year after publication for these sectors.
Regulation in forceRegulation enters into force 90 business days after publication. Date computed with national holidays, so tentative.
Regulation publishedDS 115-2025-PCM approving the AI regulation published in El Peruano.
Law 31814 publishedAI promotion law published.
Summaries for reference, not legal advice. Check the official text.
What it does
Peru's AI law and its 2025 regulation set a risk-based framework with prohibited uses and high-risk uses (for example in credit, employment, health and education access). Developers and deployers of high-risk systems must run impact assessments, keep human oversight and give transparency. Obligations phase in by sector and company size over one to four years.
- Who it applies to
- Public administration entities and private sector developers and implementers of AI systems in Peru; personal use and certain national defense uses are excluded.
- Penalties
- No new fine schedule; complaints go to existing authorities such as INDECOPI and the data protection authority under their own powers.
- Enforced by
- Presidencia del Consejo de Ministros, Secretaría de Gobierno y Transformación Digital (SGTD)
- Official name
- Ley N° 31814, Ley que promueve el uso de la inteligencia artificial en favor del desarrollo económico y social del país, and its Regulation (Decreto Supremo N° 115-2025-PCM)
- Citation
- Ley N° 31814; Decreto Supremo N° 115-2025-PCM
- Topics
- AI
Verified 2026-09-25 gob.pe
Research notes
Phase-in dates are counted from the day after publication (2025-09-10) and marked tentative for day-counting. Small and micro enterprises get two and three years respectively.
Related
Alberta POPAReplaces the privacy part of Alberta's FOIP Act for public bodies. It adds mandatory breach notification where there is a real risk of significant harm, privacy management programs, privacy impact assessments, rules for creating and using non-personal data, and notice when personal information will be fed into automated systems. It also bans selling personal information and adds large offence fines.In effect since Jun 11, 2025
Brazil AI Bill (PL 2338/2023)Risk-based AI framework inspired by the EU AI Act: prohibited (excessive-risk) uses, high-risk system obligations, algorithmic impact assessments, rights for affected persons and copyright remuneration provisions, coordinated by a national AI regulation system (SIA) led by the ANPD.No date setOntario Bill 194Enacts the Enhancing Digital Security and Trust Act, 2024, which lets Ontario set cyber security program, incident reporting and AI governance rules for public sector entities, and rules on digital information about minors held by school boards and children's aid societies. It also amends FIPPA to require privacy impact assessments, reasonable safeguards and breach notification to the IPC and affected people where there is a real risk of significant harm.In effect since Jan 29, 2025Peru PDPL and 2024 RegulationPeru's 2011 data protection law now runs under a new regulation that replaced the 2013 rules. The regulation adds 48-hour breach notification to the authority, data protection officers phased in by company size, data portability, stronger rules for processors and cross-border transfers, and detailed sanctions procedures.Next: Nov 30 DPO required: medium companies · in 34 days
Questions about Peru AI Law and Regulation
- What are the Peru AI Law and Regulation compliance deadlines?
- Jul 5, 2023: Law 31814 published. Sep 9, 2025: Regulation published. Jan 20, 2026: Regulation in force (tentative). Sep 10, 2026: Private sector: health, education, justice, security, finance (tentative). Sep 10, 2027: Private sector: transport, commerce, labour (tentative). Sep 10, 2028: Private sector: production, agriculture, energy, mining (tentative). Sep 10, 2029: Private sector: all other uses (tentative).
- When does Peru AI Law and Regulation take effect?
- Peru AI Law and Regulation took effect on Jan 20, 2026. The next milestone is Sep 10, 2027: Private sector: transport, commerce, labour.
- Who does Peru AI Law and Regulation apply to?
- Public administration entities and private sector developers and implementers of AI systems in Peru; personal use and certain national defense uses are excluded.
- What are the penalties under Peru AI Law and Regulation?
- No new fine schedule; complaints go to existing authorities such as INDECOPI and the data protection authority under their own powers.