Peru and Ecuador implement new digital and biometric data regulations

Peru's National Superintendency of Public Registries (Sunarp) has approved an institutional policy for the responsible, secure, and ethical use of artificial intelligence. The framework aims to improve registry services through increased precision, faster processing times, and more uniform criteria. National Superintendent Armando Miguel Subauste Bracesco emphasized that AI is intended as a support tool rather than a replacement for human judgment, stating that technology will not substitute the responsibilities of public registrars.

In Ecuador, the Superintendency of Personal Data Protection has issued new regulations regarding the treatment of biometric data. The rule establishes conditions for using facial recognition, fingerprints, iris scans, and voice patterns, classifying them as sensitive personal data. Entities using these technologies must now conduct risk analyses and Data Protection Impact Assessments (DPIA), which must be updated every 12 months. The regulation mandates that biometrics be used only when strictly necessary and requires that individuals be provided with non-biometric alternatives.