Other industry

Any organization using AI, even in a sector without its own rules, is subject to horizontal laws: the EU AI Act, Peru's AI law and each country's data protection and consumer laws. The use case defines the obligations: serving customers, deciding about people or generating content changes the risk more than the industry does.

Relevant sector rules

EU and Spain: AI Act literacy and prohibitions since Feb 2, 2025, transparency since Aug 2, 2026 and high-risk duties by use case from Dec 2, 2027, plus the GDPR. Peru: the Law 31814 regulation covers the whole private sector with a general deadline of Sep 10, 2029 (2027 and 2028 for small and micro businesses, unless their sector has an earlier date). Ecuador: the SPDP general rule on AI covers all personal data processing with AI since Mar 10, 2026. Chile: Law 21,719 from Dec 1, 2026. Colombia, Mexico, Argentina and Brazil: data protection and consumer laws. US: the FTC nationwide and state laws by use case (employment, chatbots, consequential decisions).

Typical AI uses

Sector regulators

European Union: European AI Office (European Commission)
European Data Protection Board (EDPB)
Spain: Spanish Data Protection Agency (AEPD)
Spanish AI Supervisory Agency (AESIA)
Ecuador: Superintendency of Personal Data Protection (SPDP)
Colombia: Superintendency of Industry and Commerce (SIC)
Peru: Presidency of the Council of Ministers, Digital Government and Transformation Secretariat (PCM-SGTD)
National Personal Data Protection Authority (Ministry of Justice)
Mexico: Ministry of Anti-Corruption and Good Governance (data protection authority)
Argentina: Agency for Access to Public Information (AAIP)
Brazil: National Data Protection Authority (ANPD)
United States (federal): Federal Trade Commission (FTC)