Peru - Digital Government Framework (1412/2018)
Decree-Law No. 1412 — Law Approving the Digital Government
Decreto Legislativo No. 1412 — Ley de Gobierno Digital
Peru
RAI-PE-NA-DN1ADXX-2018Decree-Law No. 1412, issued in 2018 by Peru's Presidencia del Consejo de Ministros, mandates a national digital government framework for all public entities. Supervised by the Secretaría de Gobierno y Transformación Digital, the law took effect on 2018-09-13 and remains In Force (Amended) to regulate data governance and interoperability.
Summary
As of 7 September 2026, Peru's Decree-Law No. 1412 (Ley de Gobierno Digital) remains In Force (Amended). The most recent regulatory update to its legal framework is Decreto Supremo N° 098-2025-PCM, published in Diario Oficial El Peruano on 31 July 2025, which modified the law's General Regulations (Reglamento approved by Decreto Supremo N° 029-2021-PCM) to update rules on digital identity, electronic signatures, digital notifications, cross-border identity interoperability, and audit obligations.
The Presidencia del Consejo de Ministros (PCM), acting through the Secretaría de Gobierno y Transformación Digital (SGTD, formerly SEGDI), is the national rector and regulatory body responsible for supervising and enforcing the government digital framework. The PCM/SGTD holds legal authority to issue mandatory technical standards and directives, establish and manage national shared platforms (such as ID Gob.pe and PIDE), conduct annual audits of technical building blocks, evaluate public entities' compliance with digital transformation rules, and initiate administrative remediation processes or report non-compliant officials for administrative and disciplinary sanctions under standard public administration regimes.
The law establishes a comprehensive national framework across several core pillars: digital identity management, provision of digital public services, digital architecture, state interoperability, data governance, and digital security. It applies to all public administration entities at national, regional, and local levels, as well as private entities exercising administrative functions. Key technical building blocks include the ID Gob.pe platform for citizen authentication, the Platform for State Interoperability (PIDE), MESA DIGITAL PERU for electronic document reception, Casilla Única Perú for electronic notifications, and Firma Perú for digital signatures.
Public entities are required to establish internal governance structures, including a Committee for Digital Government, and to appoint key officers such as a Leader of Digital Transformation, Data Governance Officer, and Digital Security Officer. Entities must implement Information Security Management Systems (SGSI), form incident response teams, catalog public datasets and services according to risk classifications, and migrate legacy physical procedures to interoperable electronic channels.
Full article
Read full text ↗Overview
Decree-Law No. 1412 (13 September 2018) provides a comprehensive legal framework to modernize public administration through digital technologies. Its object is to set the governance framework for appropriate management of digital identity, digital services, digital architecture, interoperability, digital security and data governance across the three levels of Peruvian government. The law designates the Presidency of the Council of Ministers (PCM), through the Secretariat of Government Digital (SEGDI, later renamed Secretariat of Government and Transformation Digital), as the national rector with authority to issue mandatory policies, standards and procedures. The law was published in the Diario Oficial El Peruano and its Reglamento was approved by Decreto Supremo N° 029-2021-PCM; later modifications (notably Decreto Supremo N° 098-2025-PCM) adjusted identity, signature and notification rules to accelerate nationwide implementation and address international interoperability.
Definitions
The law defines central terms used throughout the framework. "Digital identity" is the set of attributes that individualize and enable identification of a person in digital environments; a "digital credential" (digital identity credential) is the representation of those attributes enabling authentication. "Service digital" and "digital service provision" refer to public services provided through electronic means. "Interoperability" is defined across legal, organizational, semantic and technical layers and is supported by the State’s interoperability platforms. "Model of Digital Security" (Modelo de Seguridad Digital) sets principles and components for information security and incident response. These definitions are operationalized in the Reglamento, which establishes platforms such as ID Gob.pe (national authentication), PIDE (interoperability) and MESA DIGITAL PERÚ (document reception).
Governance and Institutional Framework
Article 8 of DL 1412 designates the PCM (via SEGDI / SGTD) as the national rector in charge of government digital matters and authorizes it to issue binding norms, standards, lineamientos and technical directrices. The Reglamento (DS 029-2021-PCM) details institutional roles: national coordinators, Gestores Nacionales de Identidad Digital (RENIEC for nationals; Migraciones for foreigners), entity-level "Leaders of Government and Transformation Digital", Committees for Digital Government and roles such as Data Governance Officer and Digital Security Officer. The law requires inter-entity coordination, the maintenance of catalogs and national platforms, and directs SERVIR to lead capacity-building measures. The PCM pages document responsibilities and host primary normative texts: see the PCM entry for DL 1412 and the Reglamento on the State platform (DL 1412, DS 029-2021-PCM).
Key Focus Areas
DL 1412 and its Reglamento structure implementation along multiple, mutually reinforcing axes: (1) Identity Digital: creation of a national identity framework and ID Gob.pe for authentication, with RENIEC and Migraciones as primary credential managers; (2) Digital Services: mandatory design and classification of services (informative, close, optimized, connected) and legal recognition of electronic documents, signatures and notifications when conditions are met; (3) Interoperability: establishment of the Platform for State Interoperability (PIDE) and explicit requirements for semantic and technical standards, metadata and national catalogs; (4) Data Governance: recognition of governmental data as strategic assets, creation of national data platforms (including geo-referenced data) and roles for valuation, quality and reuse; (5) Digital Security: Model of Digital Security, mandatory security management systems, incident response teams and periodic audits; (6) Shared Digital Infrastructure: national building blocks (ID Gob.pe, MESA DIGITAL PERÚ, Casilla Única Perú, Firma Perú, Págalo.pe) to reduce duplication and enable scale; (7) Inclusion and User-Centred Design: rules and principles to ensure accessibility and equivalence of digital and traditional procedures. These priorities are elaborated in the Reglamento, technical guides and sector directives published by PCM and associated agencies (see ID Gob.pe description and the PCM guidance on the Reglamento).
Implementation Framework
The Decreto Legislativo mandates that the PCM issue a Reglamento within 180 days; this resulted in DS 029-2021-PCM, which sets operational rules, technical standards and transitional timelines for entities. The Reglamento assigns responsibilities to national platform operators and establishes compulsory roles inside each entity (Leader of Government and Transformation Digital, Committee for Digital Government, Official of Government of Data, Official of Digital Security). It requires entities to register services, integrate with national platforms according to risk and service classification, and gradually migrate legacy processes to interoperable digital services. The Reglamento also prescribes the architecture for shared platforms and the mandatory use of common building blocks where applicable, plus provisions for procurement, capacity-building (SERVIR coordination) and budgetary responsibility within institutional funds.
Monitoring and Evaluation
The law and the Reglamento establish oversight and evaluation mechanisms: periodic reporting to PCM by entities, performance indicators for service availability, accessibility and interoperability, and the obligation to maintain registers and catalogs (services, datasets, metadata). PCM/SEGDI publishes guidance and monitoring tools on the national portal and organizes periodic evaluations. Additionally, the Reglamento foresees audits, security assessments, and annual reporting of metrics such as authentication transactions, incident response times and platform availability. The national platforms provide telemetry and dashboarding capabilities for centralized monitoring and to support risk-based prioritization.
Penalties, Liability, and Appeals
DL 1412 primarily establishes administrative obligations and delegates sanctioning and enforcement mechanisms to existing administrative and disciplinary regimes. The Reglamento and subsequent legal instruments define infractions for non-compliance with obligations (failure to designate required roles, failure to integrate with required platforms, inadequate security measures, mishandling of electronic notifications or documents), which can trigger administrative sanctions, internal disciplinary measures for public servants and corrective remediation orders. Remedies and appeals follow standard administrative procedural rules (Law N° 27444 and its Texto Único Ordenado) and specific provisions under the Reglamento for electronic procedure. DS 098-2025-PCM introduces clarifications on infractions and strengthens auditing and sanctioning modalities for certain identity/notification breaches.
Relationship to Other Instruments
DL 1412 is integrated into a broader Peruvian legal landscape: it references the Ley N° 27444 (Administrative Procedure), RENIEC rules for civil identity, the Law on Personal Data Protection (Law N° 29733) for data privacy safeguards, and subsequent emergency and regulatory decrees such as DU N° 006-2020 (Sistema Nacional de Transformación Digital) and DU N° 007-2020 (Marco de Confianza Digital). The Reglamento cross-references sectoral laws and directs alignment with SERVIR (human resources/training) and MEF budget norms for financing. It also interacts with laws on electronic publication and the legal value of El Peruano Electrónico.
International Alignment
The framework explicitly contemplates interoperability with international standards and encourages adoption of recognized technical protocols and best practices (including OCDE recommendations). Recent updates (e.g., DS 098-2025-PCM) reference OCDE guidance on identity digital and emphasize provisions facilitating cross-border recognition of digital identity credentials. The law and Reglamento recommend alignment with international security standards, data protection norms and open-data practices to support cross-border services and cooperation.
Implementation Timeline
| Event | Date | Notes |
|---|---|---|
| Decree-Law No. 1412 published | 2018-09-13 | DL establishes the Law approving Digital Government. |
| Reglamento approved (DS N° 029-2021-PCM) | 2021-02-19 | Regulation with operational rules and platform mandates. |
| Creation/operation of ID Gob.pe (national authentication) | 2021–2023 (phased) | Platform established by Reglamento; phased rollout and account types defined. |
| MESA DIGITAL PERÚ platform mandated | 2021–2022 | Document reception platform for citizen submissions. |
| Reglamento modifications (DS N° 098-2025-PCM) | 2025-07-30 / published 2025-07-31 | Updates on identity, signature, notifications, interoperability and audit obligations. |
Sources and References
| Source | Type |
|---|---|
| Decree-Legislative N.º 1412 — "Decreto Legislativo que aprueba la Ley de Gobierno Digital" (PCM page) | Primary Source |
| Decreto Supremo N.º 029-2021-PCM — Reglamento of DL 1412 (El Peruano viewer) | Primary Source |
| ID Gob.pe — PCM explanation of the National Identification and Authentication Platform | Primary / Official Guidance |
| Decreto Supremo N.º 098-2025-PCM — Regulation modification (legal bulletin) | Official amendment (published) |
Requirements for a company
What an organisation has to do under Peru - Digital Government Framework (1412/2018), at a glance. Not legal advice — the table below gives the provision and deadline for each item.
Must do
7- Implement the mandatory Model of Digital Security, including digital security management systems and dedicated incident response capabilities.Peruvian public sector entities
- Appoint a Leader of Digital Government and Transformation to direct institutional digital initiatives and align with national directives.Peruvian public sector entities
- Designate an Official of Data Governance and an Official of Digital Security within the entity.Peruvian public sector entities
- Integrate all public digital services requiring user authentication with the national ID Gob.pe platform.Peruvian public sector entities offering digital services
- Exchange governmental data across public institutions using the Platform for State Interoperability and approved semantic standards.Peruvian public sector entities exchanging data
- Maintain updated national catalogs and registers of digital services, datasets, and metadata as strategic assets.Peruvian public sector entities
- +1 more in the table below
Must not do
1- Do not deploy digital credentials, electronic signatures, or electronic notification systems that violate national legal standards.Peruvian public sector entities
Should do
0Nothing in this category.
Should not do
0Nothing in this category.
Who must do what
The obligations under Peru - Digital Government Framework (1412/2018), most serious first. Not legal advice — verify against the official text before relying on it.
| # | Who | Requirement | By when | Where | Severity |
|---|---|---|---|---|---|
| 1 | Peruvian public sector entities | Implement the mandatory Model of Digital Security, including digital security management systems and dedicated incident response capabilities. | Before deploying public digital services | — | Critical |
| 2 | Peruvian public sector entities | Appoint a Leader of Digital Government and Transformation to direct institutional digital initiatives and align with national directives. | Before implementing digital transformation plans | Article 8 | Critical |
| 3 | Peruvian public sector entities | Designate an Official of Data Governance and an Official of Digital Security within the entity. | Before managing public datasets or digital services | — | Critical |
| 4 | Peruvian public sector entities | Do not deploy digital credentials, electronic signatures, or electronic notification systems that violate national legal standards. | At all times | — | Critical |
| 5 | Peruvian public sector entities offering digital services | Integrate all public digital services requiring user authentication with the national ID Gob.pe platform. | Before launching authenticated public services | — | Critical |
| 6 | Peruvian public sector entities exchanging data | Exchange governmental data across public institutions using the Platform for State Interoperability and approved semantic standards. | Before conducting inter-agency data exchanges | — | Important |
| 7 | Peruvian public sector entities | Maintain updated national catalogs and registers of digital services, datasets, and metadata as strategic assets. | Ongoing | — | Important |
| 8 | Peruvian public sector entities | Perform periodic security audits and report platform availability and incident response metrics to the Secretariat of Government Digital. | Annually | — | Important |
Related Regulations
Peru - Digital Transformation Policy (085-2023-PCM)
Peru91% similar
Peru - Digital Transformation Regulation (015-2025)
Peru89% similar
Peru - Digital Transformation in Consulates (32082/2024)
Peru88% similar
Peru - AI Use in Public Entities (6927/2023)
Peru88% similar
Peru - AI Interoperability for Foreign Affairs (07619)
Peru87% similar
© Regulations.AI · reviewed against official sources on 07-Sep-2026 using Gemini 3.6 Flash