AI regulation in Kuwait (2026)

Kuwait lacks a comprehensive, enacted AI-specific statute. The U.S. Library of Congress confirmed in December 2024 that Kuwait is in the 'early stages of developing a regulatory framework for AI,' with no sector-wide law comparable to the EU AI Act in force.

CAIT published a draft Kuwait National AI Strategy (2025–2028) targeting AI integration across healthcare, education, public safety, and governance, with an AI Centre of Excellence planned for Year 1 (2025) and broad sectoral rollout by 2028. As of the Digital Watch Observatory's record, it remained in draft form.

The draft strategy proposes a cross-sectoral High-Level Steering Committee drawing together CAIT, CITRA, the National Cybersecurity Centre, relevant ministries, academia, and private-sector partners to coordinate AI initiatives and align regulation with infrastructure investment.

CITRA, established under Law No. 37 of 2014, regulates telecoms and ICT operators; its Resolution No. 26 of 2024 on Data Privacy Protection is the primary in-force instrument governing personal data processing — the main legal hook applied to AI systems that handle user data today.

Kuwait hosted the Digital Cooperation Organization's 5th General Assembly, which adopted the 'Kuwait Declaration on Responsible AI for Global Digital Prosperity,' committing DCO member states to ethical, inclusive AI governance principles addressing inequality, bias, privacy, and security risks.

As of February 2026, independent analysis identified structural barriers to Kuwait's AI rollout — including bureaucratic inertia, workforce talent gaps, and limited private-sector AI maturity — slowing the pace at which the draft strategy translates into operational programs.