Uruguay - National AI Strategy (20.212)

Overview

Article 74 of Law No. 20.212 (promulgated 6 November 2023) attributes to the Agencia para el Desarrollo del Gobierno de Gestión Electrónica y la Sociedad de la Información y el Conocimiento (AGESIC) the responsibility to design and develop a national strategy on data and artificial intelligence (AI). The strategy is to be based on international standards and is applicable to both public and private sectors. For any treatment of personal data, Article 74 requires joint action with the Unidad Reguladora y de Control de Datos Personales (URCDP). The full text of Article 74 is published in the official legal repository: https://www.impo.com.uy/bases/leyes/20212-2023/74?utm_source=openai.

Definitions

The text of Article 74 does not provide extended definitional provisions. Article 74 delegates conceptual and technical definitions (for example, of "artificial intelligence" or categories of data) to the strategy development process to be led by AGESIC and to implementing instruments or guidance documents that may follow. In practice, AGESIC's published strategy materials and accompanying documents set out working definitions and principles; examples of AGESIC publications and strategy documents are available on the government portal (see Sources and References). Where personal data is implicated, definitional and regulatory guidance is to be aligned with the data protection framework overseen by URCDP under Law No. 18.331.

Governance and Institutional Framework

Article 74 places responsibility for strategy design and development with AGESIC. Implementation and oversight activity undertaken pursuant to Article 74 has been organized by AGESIC through a Comité Estratégico del Sector Público para la Inteligencia Artificial y Datos (Strategic Committee for the Public Sector on AI and Data) and related participatory mechanisms including mesas de diálogo (multi-stakeholder dialogue tables), an observatory (Observatorio de Inteligencia Artificial en el Estado), and public consultation processes. AGESIC has led public consultation processes, produced reports to the legislature (including an "Article 74" report submitted in June 2024), and coordinated inter-agency activity consistent with the Article 74 mandate. Coordination with the Unidad Reguladora y de Control de Datos Personales (URCDP) is required by law for any treatment of personal data.

Key Focus Areas

• Principle-based strategy design: grounding the national strategy on principles such as equity, non-discrimination, respect for human dignity, democratic governance, responsibility, accountability, transparency, auditability and secure innovation.
• Data governance: developing unified approaches to the governance of data across public and private sectors, including data stewardship, interoperability and standards.
• AI development and deployment: addressing lifecycle issues for AI systems in public administration and private actors, including risk management, transparency and auditing practices.
• Data protection and privacy: ensuring coordination with URCDP for matters involving personal data and designing measures compatible with Law No. 18.331.
• Public–private and multi‑stakeholder engagement: using consultative mechanisms (mesas de diálogo, observatory, public consultation) to inform policy and produce guidance.
• Standards and good practices: proposing standards, sectoral guidelines and recommended practices for adoption in procurement, product development, auditing and public–private collaboration.

Implementation Framework

The law establishes a policy and strategy design mandate rather than prescriptive sectoral regulation in Article 74 itself. AGESIC is charged with preparing a unified national strategy addressing data governance and AI, ensuring alignment with international standards and with specific attention to data protection where personal data are implicated. Implementation has involved preparatory work, public consultations, creation of oversight and advisory bodies (Comité Estratégico, Observatorio) and inter-agency coordination. The strategy development process delegates many operational definitions and technical instruments to AGESIC and to subsequent implementing instruments, guidance documents or sectoral regulations that may follow. AGESIC's published strategy materials (national AI strategy 2024–2030, national data strategy with 2030 horizon) are the implementing policy instruments produced pursuant to the Article 74 mandate.

Monitoring and Evaluation

Article 74 itself does not set out a specific monitoring and evaluation regime in statutory text; however, AGESIC's approach to operationalizing Article 74 has included the establishment of observatory and committee structures (for example, the Observatorio de Inteligencia Artificial en el Estado and the Comité Estratégico del Sector Público para la Inteligencia Artificial y Datos) and public reporting to the legislature (including an Article 74 report submitted in June 2024). Monitoring and evaluation activities are therefore being developed through AGESIC-led governance mechanisms and through the instruments and periodic reporting that accompany the national strategies. AGESIC documents and the committee's outputs articulate indicators, recommended auditing practices and transparency expectations intended to support ongoing evaluation of AI and data initiatives.

Penalties, Liability, and Appeals

Article 74 does not establish enforcement mechanisms, criminal sanctions or administrative penalties within its text. Enforcement and penalties related to personal data processing remain under the competence of URCDP under Law No. 18.331 (data protection). Any enforcement measures, liability regimes or appeal mechanisms that would apply specifically to AI or broader data practices beyond personal data would depend on later regulatory or administrative instruments derived from the strategy, or on other applicable laws. In short, Article 74 creates a design and coordination mandate; prescriptive compliance requirements and sanctioning frameworks would be provided by subsequent regulation or sectoral instruments.

Relationship to Other Instruments

Article 74 explicitly cross-references Uruguay's data protection legal framework by requiring joint action with the URCDP on personal data matters (Law No. 18.331). The strategy produced under Article 74 is designed to articulate with existing national policies such as the Agenda Uruguay Digital 2025, prior government AI strategy instruments, national cybersecurity strategy and digital citizenship strategies. AGESIC has sought alignment between the Article 74 outputs (national AI strategy 2024–2030; national data strategy with 2030 horizon) and these existing policy instruments to ensure coherence across sectors and public administration.

International Alignment

The statutory mandate instructs AGESIC to base the national strategy on international standards; AGESIC's published strategy materials explicitly seek alignment with international instruments and standards. The strategy development process and AGESIC outputs reference international good practice in data governance and AI governance as part of their grounding and comparative approach, while tailoring policy recommendations to the national legal and institutional context.

Implementation Timeline

Sources and References