Peru widens security powers request

Update September 11, 2026: The Chamber of Deputies held a dedicated session on the request, and the PCM spelled out specific digital uses while the Justice Commission ruled the delegation nonviable in its areas. The CMCR also moved to speed up regulatory review, and the file now includes milestones tied to personal data and artificial intelligence.

Peru’s Council of Ministers submitted to Congress a bill seeking legislative delegation for 120 calendar days, with 66 requests spread across eight areas, including citizen security, state modernization, economic recovery and measures linked to organized crime. The measure moved to the Constitution Committee, which has already called in the prime minister, Luis Galarreta, to explain the scope of the request.

The Chamber of Deputies held a dedicated session on the delegation request, and the PCM said the powers would be used to strengthen digital security, reorganize DINI, reduce rural connectivity gaps, expand interoperability with the private sector and create safe testing environments for AI-based solutions.

What does the delegation request include?

The bill submitted by the Executive Branch covers eight topics and includes 66 matters, according to reporting and El Peruano itself. The main areas include citizen security, disaster risk management, SMEs, employment, productive development, tax matters, administrative simplification and state modernization.

The official gazette described the initiative as an urgent request so Congress can authorize the Executive Branch to legislate for 120 calendar days. PQS also reported that the guidelines include digital transformation and digital security in the public and private sectors, along with the digitization of state activities and services. Infobae Peru said the package is organized mainly around three axes, citizen security, economic reactivation and emergency response to the El Niño phenomenon.

More recent sector coverage added that the package also includes reforms in cybersecurity, digital governance, open finance and financial inclusion, within the state modernization and digital transformation axis.

What is in the security measures?

Within the security axis, one of the requested powers aims to amend telecom rules to track, geolocate and block phones used illegally. That point opens a regulatory front with possible effects on communications interception and geolocation data management, according to El Estado del Perú’s coverage.

The Congress Defense Commission issued a report declaring the delegation viable in matters under its authority, as long as the 120-day limit and the specific authorized topics are respected. That opinion covers migration and nationality, tracking and blocking communication devices inside prisons, weapons and explosives, the exceptional participation of the Armed Forces in prisons, the fight against organized crime and the classification of criminal organizations as terrorist groups.

Why are lawmakers criticizing the scope of the request?

Constitution Committee chair Giannina Avendaño questioned the fact that the request covers 66 items across eight areas and said the document does not provide clear support for several of them. Her remarks add to doubts about how much detail is available in the text sent by the Executive Branch.

The Constitution Committee declared itself in permanent session to evaluate the initiative, which remains in procedural review. It also summoned Prime Minister Luis Galarreta to defend the proposal and explain why it seeks authority to legislate on 66 points in key areas such as citizen security and the economy.

The hearing was set for the September 9 session, when the prime minister is expected to explain the scope of the bill and its 66 matters. The request is also formalized as Bill No. 00098-2026-2031-CD.

What did the government say about the urgency?

The government frames the request as a rapid response to citizen insecurity. Justice Minister Ernesto Álvarez said approving the powers responds to a public need and, in another interview, stressed that future legislative decrees would not be limited to higher penalties.

Álvarez said the goal is to strengthen the police and police intelligence, as well as the intelligence work of the Armed Forces, to capture criminal gangs. In comments to Expreso, he also linked the urgency of the request to a reform of the prison system and INPE, which would include building at least one mega-prison and effectively separating the most dangerous inmates.

How is the process moving in Congress?

The Constitution Committee decided to remain in permanent session and received requests for talks with party blocs to build consensus around the text. According to RPP Noticias, the bill was referred to the Constitution Committee of the Chamber of Deputies to continue its process, while the Executive Branch seeks political support.

Peru Informa added that the PCM opened a round of outreach with different party blocs. Gestión reported that the government had to fix a formal objection and send the corrected minutes to Congress, leaving the process open before any eventual authorization to legislate.

At the same time, the Commission on Economy, Banking, Finance and Financial Intelligence agreed to summon the economy minister and the head of Sunat to explain the economic scope of the package, especially the parts tied to the tax regime, finance and the open finance and financial inclusion components.

The file is now being reviewed by at least eight congressional committees, according to El Peruano, which makes the review of the 66 requested powers more complex.

The Commission on Justice and Human Rights approved by majority a report declaring the delegation nonviable in the matters under its jurisdiction, a precedent that could narrow or condition the package in the justice and fundamental rights sections.

The Multisectoral Commission on Regulatory Quality, led by the PCM, agreed that the review of rules issued under delegated powers will be counted in calendar days rather than business days. The goal is to speed up regulatory output in areas such as digital transformation, security and cybersecurity, while preserving prior quality control.

What other legislative track is moving in parallel?

Alongside the delegation request, Representative Leo De Paz Lancho introduced a bill to strengthen prevention, response, correction and compensation for harm caused by school harassment, bullying and cyberbullying committed by children and adolescents in schools across the country. The proposal includes concrete measures that go beyond simply recognizing the problem.

The text calls for the gradual and mandatory rollout of school psychologists in all schools within a maximum of 24 months, with protocols tailored to three levels of severity. In the most serious cases, it requires immediate notification of the National Police of Peru and the Public Prosecutor’s Office. It also sets out school restorative justice mechanisms, a mandatory Parent Co-Responsibility Program for parents of repeat offenders and quarterly case tracking and monitoring by CONEI, with a serious administrative violation for principals who fail to carry out that oversight.

What impact could it have on personal data and AI?

The delegation debate intersects with rules already in force on data protection and artificial intelligence. The new Regulation of Law 29733, approved by Supreme Decree 016-2024-JUS, turned several elements that were previously recommendations into regulatory obligations and added requirements on incident management, technical controls, auditing and documentation of security measures.

According to the compliance analysis cited by Mi Firma Digital, the timeline by company size sets staggered deadlines: entities with annual sales above 2,300 UIT must comply starting November 30, 2025, medium-sized companies starting November 30, 2026, small companies starting November 30, 2027 and microbusinesses starting November 30, 2028.

El Peruano also explained that Law 31814 and its regulation establish specific obligations for private companies and organizations that develop and implement AI systems in sectors such as health, education, justice, security, the economy and finance. The first adaptation deadline expires on September 10, 2026.

Technology regulation experts quoted in the material also said the AI regulation, approved by Supreme Decree 115-2025-PCM and in force since January 22, 2026, requires systems to be identified, classified and registered by risk level, impact assessments for high-risk systems and measures for governance and algorithmic transparency.

The president of Congress also reaffirmed the legislative commitment to push rules on digital transformation and cybersecurity in the context of a possible alliance with Meta, aimed at artificial intelligence and digital security. That cooperation agenda includes tech training, responsible AI use and accessibility and inclusion tools for people with disabilities.

The debate also comes as Congress is already aligned around a broader digital security agenda, while the Executive Branch seeks powers that would allow quick changes in cybersecurity, digital governance and state modernization.