Detailed overview
Uruguay does not currently have a single horizontal AI Act. Its AI framework is based on national AI strategy, digital-government policy, public-sector responsible AI guidance, data protection and sector-specific regulation.
National AI Strategy 2024–2030
Uruguay has adopted a National Artificial Intelligence Strategy 2024–2030. The strategy contains guiding principles and lines of action organised around governance, AI capabilities and sustainable development.
The strategy is intended to support responsible AI development and use across the public and private sectors. It focuses on ethical, safe, responsible and pro-innovation AI governance, while promoting inclusion, sustainability, digital sovereignty and better public management.
Digital-government AI
Uruguay also has a digital-government AI strategy aimed at responsible AI use in public administration. Public-sector AI should be assessed through transparency, accountability, privacy, human oversight and responsible-use principles.
Existing-law overlays
Where AI processes personal data, Uruguay's data-protection framework may apply. AI used in finance, healthcare, employment, consumer services, education, telecommunications or public services may also trigger sector-specific obligations.
Penalties
Uruguay does not currently have one AI-specific penalty table. Penalties depend on the relevant law breached, such as data protection, consumer protection, financial regulation, healthcare regulation, employment law, public-sector rules or criminal law.
Practical requirements & details
Sourced from the National AI Strategy 2024–2030, AGESIC public-sector AI guidance, Personal Data Protection Law (Law 18.331) + Decree 64/020, and sectoral rules.
National AI Strategy 2024–2030
- Pillars: governance, AI capabilities, sustainable development.
- Ethics-by-design, inclusivity, sustainability, digital sovereignty.
Public-sector AI strategy
- Responsible AI use in public administration.
- Transparency, accountability, privacy, human oversight, responsible-use principles.
Personal data overlay (Law 18.331)
- Lawful basis (consent default), data quality, security, individual rights.
- URCDP (Uruguayan DPA) supervises.
- Cross-border transfers permitted to adequate countries (EU adequacy decision applies in reverse).
- Fines up to UYU 500,000 per violation.
Sector overlays
- BCU on AI in financial services and fintech.
- MSP on AI medical devices.
- URSEC on AI in telecoms.