On January 9, the Executive enacted Decree No. 006-2020, setting up the National System of Digital Transformation, to improve access to digital technologies and broaden their scope. The regulation seeks to foster “digital trust” by promoting security and transparency measures, including personal data protection and ethical technology management in the digital environment with the aim of achieving sustainability and economic prosperity.
The system is about building governance by regulating the environment and creating the leadership structure necessary to achieve a balance between data openness and adequate levels of digital privacy and security. In addition it purports to encourage the design and development of digital services able to respond to citizens demand.
In another measure, the Executive approved the Digital Confidence Framework enshrined in Supreme Decree No. 007-2020. The idea is to establish measures designed to instill greater public confidence when interacting with digital services. The Framework envisages the creation of the National Digital Security Incidents Registry, to receive, consolidate and maintain data on digital security incidents reported by digital service providers.
Digital services providers need to comply with the following:
- Notify the National Digital Security Register of any digital security related incidents.
- Implement physical, technical, organizational and legal security measures to ensure the confidentiality of messages, content and information transmitted through their communications services.
- Manage digital security risks in their organization and establish controls to protect the confidentiality, integrity and availability of information.
- Establish mechanisms to verify the identity of persons accessing a digital service, according to the services’ level of risk and in accordance with current personal data protection regulations.
- Report and cooperate with the personal data protection authority when they verify a digital security incident involving personal data.
In addition, the National Institute for the Defense of Competition and Protection of Intellectual Property (Indecopi, for its acronym in Spanish), published the eighth edition of the report on “The Status of Consumer Protection in Peru“. The document shows the performance of all the entities operating in the national system, as well as the status of their progress in the field of consumer protection and defense.