Peru advances cybersecurity strategy and digital powers

Peru is nearing completion of its National Cybersecurity Strategy, while the government has asked Congress for 120 days of legislative powers to issue digital transformation and security measures through legislative decrees. In the official information released so far, there is no separate cybersecurity or personal data protection bill moving through Congress tied to that strategy.

What did the PCM report on cybersecurity?

The Secretariat of Government and Digital Transformation at the PCM said the country is finalizing its National Cybersecurity Strategy and is working on a digital governance framework. That line was presented as part of the PCM's role under Legislative Decree 1412, which sets out digital governance in the state.

The same official source did not point to any specific cybersecurity bill in Congress linked to that strategy. Public attention has focused on building the governance framework and coordinating institutions rather than on a new primary law.

What did the executive ask Congress for?

The Council of Ministers approved a bill requesting delegated legislative powers from Congress for 120 calendar days. The proposal covers eight subject areas and 66 total requests, including administrative simplification, the removal of regulatory barriers, regulatory quality, and digital transformation.

The Presidency of the Council of Ministers said the package includes digital transformation and security measures for both the public and private sectors, along with the digitalization of state activities and services. In the public text released, there is no detail on a new cybersecurity or personal data protection law, only authorization for the executive to legislate by decree.

What digital measures appear in the request?

The request sent to Congress mentions digital credentials and electronic signatures as part of state modernization. It also fits within the goal of strengthening digital transformation and digital security in both public and private settings.

Andina also said the package of powers seeks to strengthen state modernization, and that agenda is consistent with the PCM's responsibility for digital governance. In the public documentation, however, no new standalone legal framework for cybersecurity or personal data is identified.

How do Law 29733 and current rules fit in?

The available material suggests the state response is moving through existing frameworks, such as Law No. 29733 and its regulations, rather than through a new cybersecurity law. The reference to that regulatory structure appears as part of the context for the executive's push to move measures through delegated powers.

That approach also appears in coverage of leaks of Peruvian card data on the dark web, where it is noted that Israeli cybersecurity firms are offering solutions to the Peruvian market. That report places the country in a setting of rising fraud and exposure of personal data, with technical cooperation and secondary regulation as response channels.

What political activity took place in August?

In August 2026, Senator Carlos Caballero met with the PCM's Secretariat of Government and Digital Transformation. According to the congressional communication, he was briefed on the current situation, the outlook, and the challenges of state digital transformation for the coming years.

The visit points to political coordination around the rollout of digital governance and digital security. No new specific cybersecurity or personal data protection bills were reported during that meeting.

What link appears with Israel?

Andina reported that Peru and Israel are seeking to deepen cooperation in cybersecurity, and Gestión added that the relationship is gaining relevance as Israeli companies offer services to the Peruvian market. That context reinforces the view that the country is building its response through technical cooperation, regulatory progress, and the national strategy under development.