Peru - Digital Transformation Regulation (015-2025)

Overview

Decree Supreme No. 015-2025-RE approves the Regulation implementing Law No. 32082, the statute mandating the progressive digital transformation of Peru's consular offices and related organs of the Ministry of Foreign Affairs (MRE). Adopted on June 6, 2025 and published on June 7, 2025, the Regulation contains five chapters and 16 articles, a complementary final provision and two transitory provisions that set implementation deadlines including a five-year horizon for operationalization of the central consular services platform (PDSC). The Regulation explicitly references national digital governance instruments (e.g., the Government Digital legislative framework) and integrates cyber-security, continuity planning and interoperability into the consular modernization agenda. Official publication and the text are available via the Ministry of Foreign Affairs' legal notices and the Diario Oficial's HTML viewer and annex PDF; see MRE — Decreto Supremo N.° 015-2025-RE and the Diário Oficial viewer at El Peruano — Decreto Supremo N° 015-2025-RE (HTML excerpt).

Definitions

The Regulation defines core terms for consistent implementation: "digital transformation" (progressive integration of digital technologies to improve services), "PDSC" (the Platform of Digital Consular Services to centralize and deliver online consular services), "interoperability" (technical/semantic/organizational mechanisms enabling cross-entity data exchange), "Committee" (the internal MRE Committee for Government and Digital Transformation), "Official of Security and Digital Trust" and "Coordinators of Security and Digital Trust" (roles responsible for information security and risk controls at headquarters and consular posts). Definitions align with national frameworks such as Decreto Legislativo No. 1412 and relevant MRE organizational rules.

Governance and Institutional Framework

The Regulation creates and formalizes a governance model centered on a Committee for Government and Digital Transformation within the MRE, which coordinates planning, resource allocation and oversight of digital projects. It requires a Plan of Government Digital for the MRE (Plan de Gobierno Digital) as the central instrument for project definition and resource management, integrating projects from dependent organs and decentralized units. The Official of Security and Digital Trust must set information security lineamientos and controls and coordinate with Coordinators of Security and Digital Trust in each consular office. The Committee reports quarterly to the head of the entity and ensures alignment with national policy. For the formal source text and the list of responsible offices see the official annex at MRE legal notices and the Diario Oficial publication El Peruano viewer.

Key Focus Areas

The Regulation concentrates on several interrelated objectives: first, providing secure, accessible and user-centered digital consular services through the PDSC; second, ensuring interoperability with national public administration systems so that consular processes can query and exchange authoritative data with other state entities; third, embedding risk management and cybersecurity requirements (security controls, continuity planning and annual security reporting); fourth, governing the ethical and accountable deployment of emergent technologies (explicit reference to artificial intelligence and other digital tools); and fifth, promoting international cooperation to support digital transformation in consular services. The Regulation addresses operational concerns (project management, budgets, staffing, training) and user-facing requirements (transparent service provision, mechanisms for complaints and redress under the administrative law framework).

Implementation Framework

Implementation is organized around the Plan of Government Digital of the MRE, which integrates institutional and local consular projects and provides the roadmap for procurement, system design, risk assessment, staffing and budget. The Regulation mandates that the Committee manage resources and report progress quarterly. The PDSC will be deployed progressively within five years from the Regulation's publication, and the MRE must publish lineamientos and complementary documents within 300 calendar days. Interoperability obligations require collaboration among national entities and the MRE, including identification of services, security conditions and responsible entities (to be published by Ministerial Resolution in coordination with the Secretariat for Government and Digital Transformation). The Regulation also references the MRE's Plan of Operational Continuity (approved previously by ministerial resolution) as the baseline for business-continuity and disaster recovery workstreams.

Monitoring and Evaluation

Monitoring is centered on the Committee and reporting obligations: quarterly operational reports to the head of the entity on Plan implementation; compilation of security and risk reports by the Official of Security and Digital Trust (including an annual/quarterly update to the Committee); and documented evidence of interoperability agreements and technical standards. The Committee must track milestones, resources and performance indicators defined in the Plan of Government Digital. The transitory provisions establish deadlines for issuing complementary guidelines and for phased PDSC activation, which provide concrete evaluation checkpoints. The MRE must also keep documented records and make certain transparency information available through the government's digital platforms.

Penalties, Liability, and Appeals

While the Regulation does not create new criminal offenses, it establishes administrative accountability and requires compliance with existing public administration liability and sanction regimes. Obligations to follow security controls, continuity plans and interoperability rules create potential administrative liability for responsible officials or units in case of gross negligence, noncompliance or failure to adopt required safeguards. The Regulation emphasizes documentation and reporting as prerequisites for administrative review and sets paths for remedial measures, administrative investigations and appeals under the General Administrative Procedure Law (Law No. 27444) and related MRE disciplinary frameworks.

Relationship to Other Instruments

The Regulation explicitly situates itself within the national digital governance architecture: it references Decreto Legislativo No. 1412 (Law of Government Digital), the National Policy of Digital Transformation (Decreto Supremo Nº 085-2023-PCM), the System of National Digital Transformation (Decreto de Urgencia Nº 006-2020), and the MRE's own organizational regulations (Decreto Supremo Nº 135-2010-RE). It requires coordination with the Secretariat of Government and Digital Transformation for interoperability lists and standards and references the pre-existing Plan of Operational Continuity for continuity and recovery procedures. The Regulation implements Law No. 32082 and is not presented as superseding other sector-specific rules; rather, it requires compliance with the broader statutory and regulatory ecosystem.

International Alignment

The MRE's role as foreign policy and cooperation authority informs provisions that encourage international collaboration to accelerate digitalization of consular services. The Regulation promotes alignment with international standards for interoperability, data protection, and cybersecurity, and contemplates cooperation agreements, bilateral and multilateral assistance, and adoption of recognized technical standards to support secure cross-border service delivery. These provisions are intended to ensure that consular digital services integrate with host-country expectations and international good practices in digital government.

Implementation Timeline

Sources and References