The Second Final Supplementary of Decree No. 1182, on the preservation of data derived from telecommunications, states that the concessionaires of public telecommunications services and the public entities related to these services must keep the data derived from telecommunications during the first 12 months in computer systems that allow their consultation and delivery online and in real-time. At the end of the aforementioned period, they must keep said data for an additional 24 months in an electronic storage system. The delivery of data stored for a period not exceeding twelve months is done online and in real-time after receiving judicial authorisation. In the case of data stored for a period greater than 12 months, it will be delivered within 7 days following the judicial authorisation under responsibility.
A similar obligation is prescribed in Art. 16.e of Law No. 27336, which stipulates that all natural or legal persons providing public telecommunications services must retain, for a minimum period of three years from the moment the relevant information is generated, the source records underlying call‑detail data and the billing of the services they operate.

Peru is not a party to the World Trade Organization (WTO) Agreement on Government Procurement (GPA), nor does it have observer status.

According to Art. 1 of Legislative Decree No. 662, the State promotes and guarantees both existing and future foreign investments in all sectors of economic activity and in any business or contractual form permitted by national legislation. Furthermore, Peru reportedly maintains an open regime for both domestic and foreign private investment, without foreign ownership restrictions in any sector relevant for digital trade.

Peru is a party to the Patent Cooperation Treaty (PCT).

Peru has a copyright regime under the Decree No. 822. However, the exceptions do not follow the fair use or fair dealing model, therefore limiting the lawful use of copyrighted work by others. Arts. 41-51 list the exceptions, which include the reproduction by reprographic means for teaching or examination purposes in educational institutions and the reproduction of a work for judicial or administrative proceedings, to the extent justified by the purpose to be achieved, among others.
Moreover, Peru is a member of the Andean Community of Nations and is subject to Decision 351, issued in 1993. Art. 22 of the Decision sets forth a list of mandatory exceptions in the internal market but also allows the adoption of additional exceptions in the domestic law of members, as long as they comply with the international standards of the so-called three-step test.

Copyright is not adequately enforced online in Peru. It is reported that pirated and counterfeit goods remain widely available in Peru, and right holders cite particular concerns regarding internet piracy and illicit recordings in cinemas.

Peru has ratified the World Intellectual Property Organization (WIPO) Copyright Treaty.

Peru has ratified the World Intellectual Property Organization (WIPO) Performances and Phonograms Treaty.

Decision No. 486, Decree No. 1,075, and Decree No. 1,044 provide a framework for the effective protection of trade secrets. First, Art. 260 of Decision No. 486 defines trade secrets, and Art. 245 allows requesting precautionary measures to stop an alleged infringement, to obtain or retain evidence, or to ensure the effectiveness of the action or to receive compensation for damages. Moreover, Art. 3 of Legislative Decree No. 1,075 considers trade secrets as an element of industrial property, and Art. 13 of Decree No. 1,044 lists factual situations constituting trade secret infringement. INDECOPI ("Instituto Nacional de Defensa de la Competencia y de la Protección de la Propiedad Industrial") is the competent authority that applies the above-mentioned regulations in proceedings regarding trade secrets.

Under Arts. 2, 4–6 and 13 of Law No. 28295, owners of public-use infrastructure must provide access to and shared use of infrastructure required for public telecommunications services, including poles, ducts, conduits, chambers, towers and rights of way. Access may be agreed commercially or mandated by OSIPTEL where negotiations fail.
In the mobile segment, Art. 12 of Supreme Decree No. 024-2014-MTC requires registered passive infrastructure providers to make their infrastructure available to public mobile telecommunications operators. In fixed wholesale markets, Board Resolution No. 154-2019-CD/OSIPTEL designated Telefónica del Perú as a Proveedor Importante in Market No. 25 and subjected it to access and infrastructure-sharing obligations.

Peru does not mandate functional separation for operators with significant market power (SMP) in the telecom market. However, accounting separation obligations have existed since 1993. Art. 37 of Supreme Decree No. 013-93-TCC, the Single Ordered Text of the Telecommunications Law, requires telecommunications operators holding concessions or authorisations to provide two or more telecommunications services simultaneously to maintain separate accounts for their activities, pursuant to the principle of neutrality. This obligation was subsequently complemented at the regulatory level by Art. 253 of Supreme Decree No. 020-2007-MTC, the Single Ordered Text of the General Regulations of the Telecommunications Law, which further regulates the accounting separation requirement. Moreover, the Instructions on Accounting Separation in the Telecommunications Sector and the Procedure for Accounting Separation, approved by Resolution No. 161-2019-CD/OSIPTEL, establish the operational rules and procedures for accounting separation in the telecommunications sector.

Peru has appended the World Trade Organization (WTO) Telecom Reference Paper to its schedule of commitments.

It is reported that the Supervisory Body for Private Investment in Telecommunications (OSIPTEL), the executive authority for the supervision and administration of services in the telecommunications sector, is independent from the government in the decision-making process.

Art. 15 of the Law on the Protection of Personal Data and Art. 18 of its corresponding Regulation stipulate that, in cases where the recipient country does not ensure an adequate level of data protection, the data controller must guarantee that the processing of personal data will be carried out in accordance with the Peruvian legal framework. This requirement, however, does not apply in the following circumstances:
- where the transmission of personal data occurs within the context of international judicial cooperation or the implementation of international trade agreements;
- in the context of international cooperation between intelligence agencies;
- when the transfer of personal data is necessary for the performance of a contractual relationship to which the data subject is a party;
- for transfers involving banking and securities operations;
- for the prevention, diagnosis, or medical or surgical treatment of the data subject; and
- where the data subject has given their informed consent to the transfer under these conditions.

Art. 75 of Supreme Decree No. 009-2025-EF provides that for service (including consultancy) to be performed outside Lima and Callao with a value is up to PEN 200,000 (approx. USD 60,000), the standard tender documents can grant a 10% scoring bonus (calculated over the total score) to bidders domiciled in the province where the service is delivered, or in neighbouring provinces, even if they are in a different department/region. For this purpose, the bidder’s domicile is the one recorded in its RNP registration certificate.