Peru - AI Interoperability for Foreign Affairs (07619)

Project 7619/2023 (07619) — Bill on interoperability and the use of Artificial Intelligence for services of the Ministry of Foreign Affairs (later merged into consular digital transformation law)

Proyecto 7619/2023 (07619) — Ley sobre interoperabilidad y el uso de Inteligencia Artificial para los servicios del Ministerio de Relaciones Exteriores (más tarde fusionada en la ley de transformación digital consular)

Peru

RAI-PE-NA-P70IUXX-2024
Effective: July 2, 2024
In Force(In Force)
ActGovernance and OversightData Protection and PrivacyRisk Management
Export PDF

Project 7619/2023 proposed to guarantee technical, legal, organisational and semantic interoperability and to promote the ethical, sustainable and responsible use of Artificial Intelligence (AI) within the Ministry of Foreign Affairs, prioritising consular services. The project was merged with Project 6852/2023 and the combined text was approved by Congress and later enacted as Law No. 32082 on 2 July 2024, establishing a framework for progressive digital transformation of Peruvian consular offices.

Overview

Project 7619/2023 originally proposed a legal framework to guarantee interoperability (technical, legal, organizational and semantic) and to promote the ethical, responsible and sustainable use of Artificial Intelligence (AI) for services provided by the Ministry of Foreign Affairs, with a priority focus on Peruvian consulates abroad. The project was consolidated with Project 6852/2023, approved by the Pleno del Congreso, and enacted as Law N.º 32082 on 2 July 2024. The law instructs the Ministry to implement progressive digital transformation in consular offices following the National Digital Transformation Policy and to cooperate with other State entities to enable real-time, secure data exchange while safeguarding statutory exceptions and personal data protections. The Ministry later issued implementing regulations by Decreto Supremo N.º 015-2025-RE; see the Ministry publication at RREE - Decreto Supremo N.º 015-2025-RE.

Definitions

The bill (and the enacted law) relies on several core definitions: "interoperability" (technical, legal, organizational, semantic interoperability enabling data exchange and functional cooperation between systems), "artificial intelligence" (systems or software that perform tasks that would otherwise require human intelligence, including automated decision-support and language-based agents), "consular services" (the functions and services provided by consulates and the Ministry to nationals abroad and to citizens in Peru where consular processes apply), "data controller" and "data processor" (roles for entities handling personal data), and "safeguards" (technical, organizational and legal measures to protect personal data, fundamental rights and system integrity). These definitions align the text with Peru's existing digital transformation and data protection frameworks (notably Law 29733 and related norms) and with the scope described in the substitute text approved by Congress.

Governance and Institutional Framework

The consolidated proposal designates the Ministry of Foreign Affairs as the primary implementing and coordinating authority for consular digital transformation, in the framework of the National Digital Transformation Policy. The law requires the Ministry to: (i) lead design and roll-out of interoperable consular platforms; (ii) coordinate with registry and public information holders (e.g., RENIEC, Superintendencia de Migraciones, SUNARP, ONPE) to enable secure data exchange; (iii) adopt governance arrangements for procurement, system accreditation and third-party service use; and (iv) integrate ethical AI principles and privacy-by-design into architectures. The Decreto Supremo N.º 015-2025-RE establishes detailed responsibilities and creates implementation chapters addressing institutional coordination, technical standards, and publication of a digital roadmap; see the official regulation at RREE - Reglamento Ley N.º 32082.

Key Focus Areas

The law and the bill emphasize several focus areas: (1) Interoperability — ensuring secure, permanent and cost-free cooperation and unlimited consultation across public information systems relevant to consular services while protecting exceptions by law; (2) Ethical AI use — promoting transparent, explainable, non-discriminatory AI applied to service-delivery tasks (e.g., automated form pre-filling, chatbots, document validation), with human oversight for critical decisions; (3) Data protection — adherence to existing personal data rules and implementation of technical safeguards (encryption, access logs, pseudonymization); (4) Inclusion and continuity — alternative physical or digital channels for entities lacking technological capacity, accessibility provisions and 24/7 service availability targets; (5) Risk and security — cybersecurity measures, risk assessments and incident reporting; and (6) International cooperation — alignment with international standards and exchange protocols facilitating cross-border consular assistance. These focus areas reflect the combined objectives of the original Project 7619 and the substitute text enacted as Law N.º 32082.

Implementation Framework

Implementation is to be progressive and staged. The Ministry must prepare a digital transformation roadmap and an interoperability agenda, detailing prioritized services, milestones, technical standards, API and data schemas, and risk mitigation measures. The implementing regulation (Decreto Supremo N.º 015-2025-RE) provides modalities for: system accreditation, procurement of AI and cloud services, data-sharing agreements, privacy impact assessments, and training for consular staff. The regulation also requires the Ministry to publish its implementation timeline and to integrate the transformation into the Platforma Digital Única del Estado Peruano for transparency and reuse of digital services components.

Monitoring and Evaluation

Monitoring is split across internal and external controls: the Ministry must report progress to the Presidency of the Council of Ministers and Congress committees; internal audits and independent evaluations (including impact and algorithmic audits) are expected. The regulation establishes reporting obligations (periodic implementation reports) and requires metrics on availability, timeliness, user satisfaction, incidents and compliance with privacy and security standards. The Ministry should also coordinate with national supervision bodies (e.g., Autoridad Nacional de Transparencia, data protection authority) for evaluations tied to rights protection and service quality.

Penalties, Liability, and Appeals

The enacted law focuses on governance, interoperability and responsible AI use and envisages that non-compliance may trigger administrative and disciplinary measures under existing administrative law. Liability for harms (privacy breaches, faulty automated decisions) is governed by the applicable civil, administrative and criminal framework; the regulation clarifies reporting, remediation and redress channels for affected citizens. The Ministry must establish internal procedures for citizen complaints and administrative appeals, and serious incidents may be referred to supervisory authorities and judicial processes as prescribed by law.

Relationship to Other Instruments

Project 7619 and the enacted Law N.º 32082 operate within Peru's broader digital governance ecosystem. They reference and must be implemented in coherence with: the National Digital Transformation Policy; data protection law (Law N.º 29733 and its regulations); sectoral legal obligations of RENIEC, SUNARP, ONPE and Migraciones; public procurement rules; and cybersecurity mandates. The law does not replace these instruments but creates an interoperability and AI adoption layer for consular services, specifying cooperation obligations and safeguards while deferring to sectoral competencies for certain sanctions and data protection enforcement.

International Alignment

The bill and the enacted law explicitly reference international best practices and the desire to align Peru’s consular digital transformation with international standards (e.g., OECD recommendations on digital government, data protection norms and emerging AI governance frameworks). The Ministry has signalled that the law aims to facilitate international cooperation, simplify cross-border procedures for nationals abroad and support Peru’s digital diplomacy objectives. This international alignment is further advanced through the regulatory text and operational guidance which cite international norms and encourage participation in multilateral technical interoperability initiatives.

Implementation Timeline

MilestoneDateNotes
Project registered in Congress2024-04-18Initial registration as Project 07619/2023-CR. Source: congressional record.
Committee (Relations) approval2024-04-29Commission approbation of predictamen and dictionary combining PL 6852 and 7619.
Pleno approval (substitute text)2024-05-30Pleno approved combined text (97 for, 1 against, 1 abstention).
Autógrafa sent to Executive2024-06-11Final text sent to the President of the Republic.
Law promulgated (Ley N.º 32082)2024-07-02Promulgation and publication in official channels.
Regulation (Decreto Supremo N.º 015-2025-RE)2025-06-06Reglamento approving implementation details was published and made available by RREE.

Compliance Checklist

RequirementWhoEvidence
Publish digital transformation roadmapMinistry of Foreign AffairsRoadmap document and public posting on Platforma Digital Única.
Adopt interoperability standards and APIsMinistry; cooperating agenciesAPI specs, data-sharing agreements and technical accreditation.
Perform privacy & algorithmic impact assessmentsMinistry; vendorsImpact assessment reports; mitigation plans.
Provide alternative access channelsMinistry; partner entitiesOperational procedures and access points for non-digital users.
Implement cybersecurity measuresMinistry; IT providersSecurity policies, incident response plans, audit logs.
Establish citizen complaint & redress procedureMinistryPublished complaint channel, SLA metrics, appeal records.

Sources and References

SourceType
"Promueven implementación progresiva de uso de inteligencia artificial en oficinas consulares del Perú"Primary Source
"Comisión de Relaciones Exteriores aprobó el predictamen"Primary Source
"Ley N.º 32082 - Ley que dispone la implementación progresiva de la transformación digital en las oficinas consulares del Perú"Primary Source
"Canciller: Proyecto de ley de transformación digital en oficinas consulares contribuirá a mejorar los servicios"Primary Source
"Decreto Supremo N.º 015-2025-RE - Aprobación del reglamento de la Ley N.º 32082"Primary Source
Plain English

Peru's Law N.º 32082 mandates the Ministry of Foreign Affairs to progressively digitize its consular services, focusing on interoperability and ethical Artificial Intelligence use.

This new law, enacted on July 2, 2024, applies primarily to the Ministry of Foreign Affairs (MFA) and its consular offices worldwide. It also requires cooperation from other Peruvian state entities like RENIEC (national identity registry) and Migraciones (migration authority) to enable seamless data exchange. The goal is to modernize how Peruvians abroad and at home interact with consular services.

The law sets out several key requirements for the MFA: - **Ensure Interoperability:** Consular systems must be able to securely and freely exchange data with other relevant public information systems. This means breaking down digital silos between government agencies. - **Use AI Ethically:** Any Artificial Intelligence deployed, such as chatbots or automated form pre-filling, must be transparent, explainable, and non-discriminatory. Crucially, critical decisions involving AI must always retain human oversight. - **Protect Data:** The MFA must strictly adhere to Peru's existing personal data protection laws, implementing strong technical safeguards like encryption and access logs. - **Plan for Transformation:** The Ministry must develop and publish a detailed digital transformation roadmap, outlining specific services to be digitized, milestones, and technical standards.

While the law itself came into force on July 2, 2024, its detailed implementation framework was approved through a regulation on June 6, 2025. Non-compliance with these mandates could lead to administrative and disciplinary actions under existing Peruvian law. For instance, if a privacy breach occurs due to faulty systems, liability would fall under current civil, administrative, or criminal frameworks. A practical pitfall for the MFA and its partners is the "progressive" nature of the transformation; it requires sustained effort and complex coordination with numerous other government bodies, meaning immediate, sweeping changes are not expected. Furthermore, the law emphasizes inclusion, requiring alternative physical or digital channels for those without technological access, ensuring no citizen is left behind in the digital shift.

Plain-English rewrite by Regulations.ai — not legal advice. Verify against the official text.

What you must do — compliance checklist

0 / 13 marked complete

Plain-English obligations under Peru - AI Interoperability for Foreign Affairs (07619). Not legal advice — verify against the official text before relying on it.

  1. #1CriticalAs per roadmap

    Applies to: Ministry of Foreign Affairs

    The law requires the Ministry to: (i) lead design and roll-out of interoperable consular platforms
  2. #2CriticalOngoing

    Applies to: Ministry of Foreign Affairs

    coordinate with registry and public information holders... to enable secure data exchange
  3. #3CriticalBefore system deployment

    Applies to: Ministry of Foreign Affairs

    integrate ethical AI principles and privacy-by-design into architectures.
  4. #4CriticalBefore critical AI deployment

    Applies to: Ministry of Foreign Affairs (when using AI)

    human oversight for critical decisions
  5. #5CriticalOngoing

    Applies to: Ministry of Foreign Affairs (when handling personal data)

    adherence to existing personal data rules and implementation of technical safeguards
  6. #6CriticalOngoing

    Applies to: Ministry of Foreign Affairs

    cybersecurity measures, risk assessments and incident reporting
  7. #7CriticalAs per regulation

    Applies to: Ministry of Foreign Affairs

    The Ministry must prepare a digital transformation roadmap and an interoperability agenda
  8. #8CriticalBefore system deployment

    Applies to: Ministry of Foreign Affairs

    privacy impact assessments
  9. #9CriticalAs per regulation

    Applies to: Ministry of Foreign Affairs

    The Ministry must establish internal procedures for citizen complaints and administrative appeals
  10. #10ImportantAs per regulation

    Applies to: Ministry of Foreign Affairs

    adopt governance arrangements for procurement, system accreditation and third-party service use
  11. #11ImportantAs per regulation

    Applies to: Ministry of Foreign Affairs

    requires the Ministry to publish its implementation timeline and to integrate the transformation into the Platforma Digital Única
  12. #12ImportantPeriodically

    Applies to: Ministry of Foreign Affairs

    the Ministry must report progress to the Presidency of the Council of Ministers and Congress committees
  13. #13ImportantPeriodically

    Applies to: Ministry of Foreign Affairs

    internal audits and independent evaluations (including impact and algorithmic audits) are expected.

© Regulations.AI — created on 13-Jun-2026