Peru's SGTD approved Directive 002-2026-PCM/SGTD setting the profile and responsibilities of the AI Officer in public entities
El Peruano reports that Peru's digital-government secretariat has set out the profile and responsibilities of the AI Officer in a public entity. The profile requirement becomes enforceable 12 months after the directive enters into force.
Bottom line: According to El Peruano, the SGTD approved a directive that sets criteria for public entities to designate an AI Officer and define that officer's responsibilities. Compliance with the profile is enforceable 12 months after the directive takes effect.
Who this affects: Public entities in Peru, the officials who would hold the AI Officer role, and vendors hired to assist that officer, as reported.
Issue date: 21 October 2026 (date of the El Peruano article). The directive's own approval date is not stated in that article.
What changed: The directive sets the AI Officer profile (article 9, per the article) and responsibilities, and says entities that contract third-party services to assist the officer must guarantee security and protection of personal data and institutional information. We have not compared this with earlier rules.
Analysis: The 12-month period applies to compliance with the article 9 profile. The article does not set a deadline for choosing, confirming or designating the officer, and we could not open the directive text, so the profile criteria themselves are unknown to us.
- Instrument (English)
- Directive No. 002-2026-PCM/SGTD, profile and responsibilities of the Artificial Intelligence Officer, approved by SGTD Resolution No. 004-2026-PCM/SGTD
- Authority
- Secretaría de Gobierno y Transformación Digital (SGTD), Presidencia del Consejo de Ministros (PCM)
- Jurisdiction
- Peru
- Current Status
- Approved, as reported by El Peruano on 21 October 2026. We did not open the gazette text
- Bindingness
- The article describes a directive for public entities and ties the profile to the responsibility of each entity's highest administrative authority. Its legal rank is not stated in the source
- Issue date
- 21 October 2026 (El Peruano article date). The resolution's approval date is not stated in the source
- Effective date
- Not stated in the source. The profile in article 9 is enforceable from 12 months after the directive enters into force
- What changed
- A directive sets criteria for designating the AI Officer in public entities and defines the officer's responsibilities and institutional coordination mechanisms
- Who this affects
- Peruvian public entities, their highest administrative authorities, and third-party providers contracted to assist the AI Officer
- Scope
- Public entities, as reported. The article does not list which classes of entity are covered
- Primary source
- El Peruano, Inteligencia artificial en el Estado: establecen perfil y responsabilidades de un nuevo oficial (21 October 2026)
- Workflow impact
- Entities would need to be able to show that their AI Officer meets the article 9 profile once the 12-month period after entry into force has run, and, where they contract outside help for the officer, to meet the security and data-protection duties the article describes
- Operational next step
- Obtain the directive text from gob.pe, check article 9 against the person holding or proposed for the role, and review contracts with any provider assisting that person
- Last verified
- 2026-10-25
Primary source: El Peruano, Inteligencia artificial en el Estado: establecen perfil y responsabilidades de un nuevo oficial
Key takeaways
- El Peruano reports the directive sets the profile and responsibilities of the Oficial de Inteligencia Artificial in public entities.
- The profile in article 9 is enforceable 12 months after entry into force: «será exigible a partir de los 12 meses siguientes a su entrada en vigor».
- Entities that contract outside services to assist the officer must guarantee protection of personal data and institutional information, as reported.
- This briefing rests on a newspaper report, not the directive text.
What did Peru approve, and how is this different from the national AI strategy?
El Peruano, Peru's official gazette newspaper, reports that the Executive approved Directive No. 002-2026-PCM/SGTD, which "establece el perfil y las responsabilidades del Oficial de Inteligencia Artificial", through SGTD Resolution No. 004-2026-PCM/SGTD. The article says the directive sets criteria for public entities to designate the officer and to define the officer's responsibilities and institutional coordination mechanisms.
This is a narrower item than our earlier briefing, which we did not re-verify for this piece, on the national AI strategy resolution, which that briefing describes as creating the officer role and an entity-level AI action plan. It described profile and designation guidelines as still pending. We have not confirmed that this directive is those guidelines, because the El Peruano article does not mention the strategy resolution. Peru's AI law regulation timeline is a separate track.
When does the AI Officer profile become enforceable, and who is answerable?
The article states: «El cumplimiento del perfil del Oficial de Inteligencia Artificial establecido en el artículo 9 de la directiva será exigible a partir de los 12 meses siguientes a su entrada en vigor». In plain terms, compliance with the profile in article 9 can be demanded 12 months after the directive enters into force. The article does not give that entry-into-force date, so the end of the window cannot be computed from what we opened.
The same sentence places this «bajo responsabilidad de la máxima autoridad administrativa de la entidad pública», meaning under the responsibility of the entity's highest administrative authority. The article names no penalty and no enforcement body for non-compliance with the profile.
What does the directive require when a third party assists the AI Officer?
According to the article, entities that contract specialised third-party services to assist the officer must guarantee security, trust and protection of the personal data and institutional information those providers access or process. To do so, they must observe the entity's information-security policy, its institutional policy on safe, responsible and ethical use of AI-based systems, and the rules on personal-data protection and AI.
The article places these duties on the contracting entity, not directly on the provider. In the desk's reading, a vendor could expect an entity to ask for matching contract terms, but the article does not say so. The article does not describe specific clauses, audit rights or certification.
What role does the SGTD keep, and what should public-sector counsel and vendors do now?
The article says the SGTD, acting under its leading functions on digital government, trust and digital transformation, is empowered, in the article's words "estará facultada para interpretar, aclarar y supervisar el cumplimiento de la resolución y la directiva", and may give an opinion on matters not covered, taking entities' organisational particulars into account. The resolution also orders publication of the directive on gob.pe and on the PCM site.
- Download the directive from gob.pe and read article 9 before relying on any summary, including this one.
- Record who holds the AI Officer role today, and test that person against the article 9 profile, bearing in mind that compliance with the profile is enforceable 12 months after entry into force.
- Review any contract with an outside provider that helps the officer, for data-protection and information-security terms.
- Where the text is unclear, the SGTD is the body the article names for interpretation and clarification.
What are the key dates and parties?
| Item | Detail |
|---|---|
| El Peruano article | 21 October 2026 |
| Directive | No. 002-2026-PCM/SGTD |
| Approving resolution | SGTD Resolution No. 004-2026-PCM/SGTD |
| Profile enforceable | 12 months after entry into force (date not stated in the article) |
| Interpretation and oversight | Secretaría de Gobierno y Transformación Digital |
FAQ
What is Directive 002-2026-PCM/SGTD?
According to El Peruano, it is a directive approved by Resolution 004-2026-PCM/SGTD of the Secretaría de Gobierno y Transformación Digital. It sets the profile and responsibilities of the Oficial de Inteligencia Artificial (AI Officer) in Peruvian public entities.
When does the AI Officer profile become enforceable?
El Peruano reports that compliance with the profile in article 9 of the directive becomes enforceable 12 months after the directive enters into force. The article we opened does not state the entry-into-force date, so we cannot give a calendar date.
Who answers if an entity does not meet the profile?
El Peruano reports that the profile requirement applies under the responsibility of the entity's highest administrative authority. It does not describe any sanction.
What does the directive say about outside vendors?
As reported, entities that contract third-party specialised services to assist the AI Officer must ensure security, trust and protection of the personal data and institutional information those providers access or process, observing the entity's information-security policy, its AI-use policy and data-protection and AI rules.
Does this replace the national AI strategy resolution?
The article does not say. Our separate briefing covers Resolucion Ministerial 152-2026-PCM and the national strategy; we have not verified how the two instruments relate.
What we did not verify
What we opened: the El Peruano news article of 21 October 2026, on 25 October 2026 (UTC). Every fact and quotation about the directive comes from it. The description of our earlier national-strategy briefing comes from that briefing, not from El Peruano.
What we did not open: the text of Directive 002-2026-PCM/SGTD, Resolution 004-2026-PCM/SGTD, or any gob.pe publication. The article's own words are the only source, so we do not know the article 9 criteria, the entry-into-force date, the approval date of the resolution, which entity classes are covered, or whether any sanction attaches. We also did not confirm how the directive relates to Resolucion Ministerial 152-2026-PCM.
What we refuse to claim: any profile requirement, deadline date, penalty or scope that the article does not state.
El Peruano reports that Peru's SGTD approved a directive defining the AI Officer's profile and duties in public entities, with compliance with the article 9 profile enforceable 12 months after entry into force. Read the directive text on gob.pe, check article 9 against your officer, and review provider contracts for data-protection terms. Only compliance with the article 9 profile is reported as subject to the 12-month period.
Related briefings
Source File
Secondary: None relied on for the facts above. The primary here is a gazette newspaper report of the directive, not the directive text.
Last checked: 2026-10-25 (UTC)
Status: Approved directive as reported; text not opened.
Editorial note: Informational analysis for working professionals, not legal advice. Confirm how any rule applies to your situation with qualified counsel.
Informational analysis for working professionals, not legal advice. Confirm how any rule applies to your situation with qualified counsel.
Sponsored Training
Practical AI training for regulated professionals, built around verification, documentation and a defensible process. See the courses.