Peru

Scope

Peru Law 31814 was enacted in July 2013 and further enforced and implemented by Decree 115-2025-PCM in September 2025.

The law applies to any individual or company creating, developing, or using AI systems in Peru; public sector entities that deploy AI systems for public services, decision-making, or citizen interaction; AI developers or providers offering services to Peruvians, even if they are based abroad, are subject to compliance with the law if their systems are used in Peru; and users of high-risk AI systems.

Key Obligations

Risk management

Apply risk classification (prohibited, high-risk, acceptable-risk) and implement safeguards.

Transparency and explainability

Provide clear information about the AI system, including its limitations, purpose, and impact on decision-making. Requirements for documentation, labelling, and disclosure for systems that significantly affect individuals.

Human oversight

Ensure critical decisions are supervised by humans where required. Mandatory human involvement or supervision

in high-risk decision loops (e.g., hiring, medical advice, credit decisions).

Data protection

Comply with Peru's data protection and privacy laws when processing personal data.

Security and auditing

Security controls, impact assessments, and audit requirements for high-risk AI.

Peru

Scope

Key obligations