Peru enacted a dedicated AI law, Law No. 31814, in July 2023. The statute is promotional in character, but its implementing regulation, published in September 2025 and in force from January 2026, added real structure: a three-tier risk framework, prohibited practices including unauthorized mass surveillance and predictive policing, human-oversight duties for high-risk uses, sandboxes, and phased sector timelines running one to four years. The first sector deadline, for health, education, justice, security, economy, and finance, passed in September 2026. Since April 30, 2025, Law 32314 has also made the use of AI an aggravating circumstance in crimes and added AI deepfakes to the offenses of defamation, fraud, and child sexual abuse material.
Key points
- Law 31814 (July 5, 2023) promotes AI for economic and social development on principles including security and human rights.
- The implementing regulation entered into force in January 2026, ninety business days after publication.
- Prohibited practices include mass surveillance without a legal basis, crime prediction against individuals, and autonomous lethal systems.
- High-risk uses require human oversight by trained personnel authorized to halt or correct decisions.
- Phased sector implementation, counted from September 10, 2025: health, education, justice, security, economy, and finance by September 10, 2026; transport, commerce, and labor in two; production, agriculture, energy, and mining in three; others in four; small enterprises get two years and microenterprises three.
- Law 32314, in force since April 30, 2025, makes the use of AI an aggravating circumstance for any crime, lets judges raise computer-crime sentences by up to a third when AI is used, and covers AI deepfakes in the offenses of child sexual abuse material, defamation (one to three years in prison), and aggravated fraud (four to eight years).
- A directive in force since October 22, 2026 requires ministries and their attached bodies, constitutionally autonomous bodies, the judiciary, Congress, state companies, public universities, public hospitals of category II-2 or higher, regional governments, and Type A and C municipalities to designate an AI Officer, who coordinates AI risk and impact assessments and oversees the entity's register of AI systems. Designations are due within six months for the listed national bodies, nine for regional governments, and twelve for Type A and C municipalities and local public companies.
Laws and instruments
Implementing Regulation of Law 31814
Supreme decree, published September 9, 2025
Adds the operative structure: three-tier risk classification, prohibited practices, human oversight for high-risk uses, registration and traceability with three-year retention for impact assessments, sandboxes, and phased sector timelines.
Effective: January 2026 (90 business days after publication); sector obligations phase in from September 2026 to September 2029
Directive on AI Officers in public entities
Directive 002-2026-PCM/SGTD, approved by Resolution 004-2026-PCM/SGTD; published October 21, 2026
Requires the public bodies it lists, from ministries and state companies to regional governments and Type A and C municipalities, to designate an AI Officer who sits on the entity's digital government committee, coordinates risk and impact assessments of AI-based systems, including the degree of effective human oversight, oversees the entity's register of AI systems, makes sure systems are tested for risks and vulnerabilities before deployment, and reports quarterly. Officers cannot be removed or sanctioned for raising alerts about improper or high-risk uses.
Effective: October 22, 2026; designations due within six months for the listed national bodies, nine for regional governments, and twelve for Type A and C municipalities and local public companies; the officer profile is enforceable from October 2027
Law 32314: AI in the commission of crimes
Law No. 32314, published April 29, 2025
Amends the Criminal Code and the Computer Crimes Law (Law 30096) to address AI. Using AI or similar technology to commit a crime becomes an aggravating circumstance (Criminal Code article 46), and judges may raise computer-crime sentences by up to a third above the legal maximum when AI is used. Child sexual abuse material made with AI, including deepfakes, falls under article 129-M (six to ten years in prison); defamation through AI deepfakes carries one to three years (article 132); and aggravated fraud by manipulating a person's voice or image with AI carries four to eight years (article 196-A).
Effective: April 30, 2025
Timeline
- July 5, 2023
Law 31814 is published in El Peruano; it takes effect the next day.
- April 29, 2025
Law 32314 is published, adding AI to the Criminal Code and the Computer Crimes Law; it takes effect the next day.
- September 9, 2025
Implementing regulation published with risk tiers and prohibitions; phased sector clocks start the next day.
- January 2026
Regulation in force, ninety business days after publication.
- April 29, 2026
Ministerial Resolution 152-2026-PCM approves the National AI Strategy 2026 to 2030.
- September 10, 2026
First sector wave (health, education, justice, security, economy, finance) reaches its one-year compliance deadline.
- October 21, 2026
The digital government secretariat publishes a directive requiring public entities to designate an AI Officer; it takes effect the next day.
- September 10, 2027
Second sector wave (transport, commerce, and labor) and small enterprises reach their two-year deadline.
Who it applies to
Public and private AI development and use in Peru, phased by sector and entity size, coordinated by the Secretariat for Government and Digital Transformation with INDECOPI and the data protection authority. The public bodies listed in the AI Officer directive, including ministries, state companies, regional governments, and Type A and C municipalities, must also designate an AI Officer.
Penalties
Enforcement through existing consumer protection, competition, and data protection regimes coordinated under the regulation, rather than a standalone AI fine schedule. Law 32314 adds criminal penalties when AI is used to commit crimes, including one to three years in prison for defamation through AI deepfakes and four to eight years for aggravated fraud by AI voice or image manipulation.
Recent developments
October 21, 2026
El Peruano
Peru requires public entities to designate an AI Officer
A directive of the Secretariat for Government and Digital Transformation, published October 21 and in force the next day, requires ministries, constitutionally autonomous bodies, the judiciary, Congress, state companies, public universities, public hospitals of category II-2 or higher, regional governments, and Type A and C municipalities to designate an AI Officer within six, nine, or twelve months depending on the type of entity. The officer coordinates risk and impact assessments of AI systems, oversees the entity's register of AI systems, makes sure systems are tested before deployment, and reports quarterly. The profile requirements become enforceable twelve months after entry into force.
Peru's AI regulation enters into force with prohibitions and phased sector deadlines
The implementing regulation of Law 31814 took effect ninety business days after its September publication, adding a three-tier risk framework, prohibitions on unauthorized mass surveillance and predictive policing, human-oversight duties, sandboxes, and sector compliance clocks running one to four years.
Common questions
Does Peru have a comprehensive AI law?
It has a framework law. Peru enacted a dedicated AI law, Law No. 31814, in July 2023. The statute is promotional in character, but its implementing regulation, published in September 2025 and in force from January 2026, added real structure: a three-tier risk framework, prohibited practices including unauthorized mass surveillance and predictive policing, human-oversight duties for high-risk uses, sandboxes, and phased sector timelines running one to four years. The first sector deadline, for health, education, justice, security, economy, and finance, passed in September 2026. Since April 30, 2025, Law 32314 has also made the use of AI an aggravating circumstance in crimes and added AI deepfakes to the offenses of defamation, fraud, and child sexual abuse material.
What are the penalties for AI violations in Peru?
Enforcement through existing consumer protection, competition, and data protection regimes coordinated under the regulation, rather than a standalone AI fine schedule. Law 32314 adds criminal penalties when AI is used to commit crimes, including one to three years in prison for defamation through AI deepfakes and four to eight years for aggravated fraud by AI voice or image manipulation.
Who does AI regulation in Peru apply to?
Public and private AI development and use in Peru, phased by sector and entity size, coordinated by the Secretariat for Government and Digital Transformation with INDECOPI and the data protection authority. The public bodies listed in the AI Officer directive, including ministries, state companies, regional governments, and Type A and C municipalities, must also designate an AI Officer.
Cite this page
Artificial Intelligence Regulations, "AI Regulation in Peru," reviewed October 26, 2026, https://artificialintelligenceregulations.com/jurisdictions/peru.html.
Entries state the position as of the review date and link to the primary text for verification.
