Peru advances AI, data, and digital powers

Update September 7, 2026: Peru’s regulation for Law No. 31814 on artificial intelligence, approved in September 2025, is now in force, and the framework assigns the PCM responsibility for AI governance and for drafting national AI and data governance strategies. The country also added new official references on its AI performance and digital adoption.

Peru has finished its National Cybersecurity Strategy, but the public debate has expanded to artificial intelligence, data governance, and digital transformation. The executive branch also asked Congress for 120 days of legislative authority to issue digital transformation and digital security measures through decrees, while the regulation for Law No. 31814 is already in force and sets the rules for AI governance in the state.

What did the PCM report on cybersecurity?

The PCM’s Secretariat of Government and Digital Transformation said the country is wrapping up its National Cybersecurity Strategy and is working on a digital governance framework. That effort was presented as part of the PCM’s role under Legislative Decree 1412, which governs digital administration in the state.

The same official source did not point to a specific cybersecurity bill in Congress tied to that strategy. Public attention has centered on building the governance framework and on institutional coordination, rather than on a new primary law.

What did the executive branch ask Congress for?

The Council of Ministers approved a bill requesting legislative powers from Congress for 120 calendar days. The proposal covers eight areas and 66 requests in total, including administrative simplification, removal of bureaucratic barriers, regulatory quality, and digital transformation.

The Presidency of the Council of Ministers said the package includes digital transformation and digital security measures for both the public and private sectors, along with the digitization of state activities and services. The public text released does not detail a new cybersecurity law or personal data protection law, but rather authorization for the executive branch to legislate through decrees.

What digital measures appear in the request?

The request sent to Congress mentions digital credentials and electronic signatures as part of state modernization. It also fits within the goal of strengthening digital transformation and digital security in both public and private settings.

Andina also said the powers package seeks to strengthen state modernization and that this agenda is consistent with the PCM’s responsibility for digital governance. In the public documentation, however, there is no new standalone legal framework identified for cybersecurity or personal data.

What changed with the artificial intelligence law?

The Regulation of Law No. 31814, approved by Supreme Decree No. 115-2025-PCM, orders the creation of the National Artificial Intelligence Strategy through 2030 and the National Data Governance Strategy. The Presidency of the Council of Ministers, through the Secretariat of Government and Digital Transformation, was assigned to lead that governance under a framework focused on security, ethics, transparency, sustainability, inclusion, and human rights.

The rule was enacted on September 8, 2025, and published in the Official Gazette El Peruano on September 9, 2025. Under its first supplementary final provision, it takes effect in January 2026.

The SGTD had already been designated as the national authority on artificial intelligence under Law No. 31814, according to UNESCO’s observatory on AI ethics and governance. The regulation completed the shift from draft proposals published in 2024 to an active framework for 2025 and 2026.

What do the new indicators say about Peru?

Recent official references place Peru at 55.90 points and 59th out of 195 countries in the Latin American Artificial Intelligence Index 2025, according to the Peruvian state platform. CEPAL says that index evaluates 19 countries in Latin America and the Caribbean.

In another reading of the same ILIA 2025, Andina reported that Peru moved from 8th place in 2024 to 7th in 2025 within the region, with 51.93 points. Bloomberg Línea, for its part, placed Peru in the group of AI adopters alongside Colombia, Costa Rica, Argentina, and Mexico.

The difference between those measurements comes from the fact that one looks at the global ranking and the other at the regional bloc. In any case, both show progress in adoption and readiness, alongside a regulatory agenda that is already in force.

What does the digital adoption index show?

The 2025 Digital Adoption Index placed Peru at 0.21, below Colombia at 0.31 and Chile at 0.32. CAF and the National Consulting Center said the gap is explained not only by connectivity, but by the ability to turn intent into digital use that creates value.

That result highlights challenges in digital skills and digital culture, alongside the expansion of AI and data governance. In the same vein, analyses of the regional technology ecosystem point to progress in banking and digital government as sectors driving AI adoption.

How do Law 29733 and the current rules fit in?

The available material points to a state response built on existing frameworks, such as Law No. 29733 and its regulation, rather than on a new cybersecurity law. The reference to that regulatory structure appears as part of the context in which the executive branch is pushing measures through delegated legislative authority.

That approach also appears in coverage of leaks of Peruvian card data on the dark web, where it is noted that Israeli cybersecurity firms are offering solutions to the Peruvian market. That report places the country in a setting of rising fraud and exposure of personal data, with technical cooperation and secondary regulation as response channels.

What political activity took place in August?

In August 2026, Senator Carlos Caballero met with the PCM’s Secretariat of Government and Digital Transformation. According to the congressional communication, he was briefed on the current situation, outlook, and challenges of the state’s digital transformation in the coming years.

The visit points to political coordination around the rollout of digital governance and security. No new specific bills on cybersecurity or personal data protection were reported at that meeting either.

What link appears with Israel?

Andina reported that Peru and Israel are looking to deepen cooperation on cybersecurity, and Gestión added that the tie becomes more relevant amid the presence of Israeli companies seeking to serve the Peruvian market. That context reinforces the view that the country is shaping its response through technical cooperation, regulatory progress, and the national strategy now under development.