It is reported that government ministries screen inbound foreign investments in the sectors they oversee. Special commissions are responsible for reviewing all required legal and financial documents. While screening criteria vary, they are designed to assess whether proposed investments comply with local laws. However, the screening process is neither public nor transparent, which may create a barrier to investment. Additionally, the Department of International Business within the Ministry of Foreign Affairs requires prospective investors to complete an intake form. This form allows the department's appraisal committee to conduct a preliminary assessment to determine whether the foreign direct investment aligns with the government’s development objectives.

Peru has not signed the United Nations (UN) Convention on the Use of Electronic Communications in International Contracts.

Peru has not adopted national legislation based on or influenced by the United Nations Commission on International Trade Law (UNCITRAL) Model Law on Electronic Commerce.

Peru enacted the Digital Signatures and Certificates Act, drawing upon the United Nations Commission on International Trade Law (UNCITRAL) Model Law on Electronic Signatures.

Paraguay implements a de minimis threshold, that is the minimum value of goods below which customs do not charge duties, equal to USD 200. Under the courier regulation approved by Supreme Decree No. 192-2020-EF, shipments are classified by category, and Category 2 covers goods with a FOB value of up to USD 200 per shipment, which are not subject to import duties. This threshold aligns with the International Chamber of Commerce (ICC) recommended global baseline de minimis level of USD 200 or more.

Pursuant to Art. 7.1 of Supreme Decree No. 016-2024-JUS, which approves the Regulation of Law No. 29733 on Personal Data Protection, the controller of a personal data bank, or the person responsible for it, whether located within or outside Peruvian territory, must (unless the processing is carried out solely for transit purposes) ensure the means necessary to comply effectively with the obligations established in the Law and the Regulation, and appoint a representative in Peru (or for Peruvian territory) as the contact point with the National Personal Data Protection Authority. Art. 2 defines a personal data bank as "a set of data on natural persons, whether computerised or not, structured according to specific criteria, which allows access to personal data without disproportionate effort, whether centralised, decentralised or distributed functionally or geographically".

The Consumer Protection Code Law provides a comprehensive consumer protection framework that applies to online transactions. According to Art. 2 of the law, the purpose of the Code is to enable consumers to access suitable products and services and to enjoy the rights and effective mechanisms for their protection, reducing information asymmetry and correcting, preventing, or eliminating conduct and practices that affect their legitimate interests.

According to Art. 63 of the Telecommunications Law, all equipment or apparatus that must be connected to a public network to provide any service, or that is used to emit radioelectric energy, must have the corresponding approval certificate (“certificado de homologación”). According to Art. 75 of the Law, this procedure is carried out by the Peruvian Government through the Ministry of Transport and Communications, which can delegate powers to entities and laboratories for measurements and tests.
According to Art. 8 of the Specific Regulations for Homologation of Telecommunications Equipment and Apparatus, the homologation of telecommunications equipment and/or devices that produce radioelectric emissions is subject to the payment of a processing fee, and applicants must submit a copy of the technical manual with specifications for the equipment or appliance to be approved, indicating the mark, model, and name and address of the manufacturer. Ministerial Resolution N. 521-2008-MTC/03 established the recognition of approval certificates or similar documents for telecommunications equipment and devices from the United States and Canada.

Peru limits the use of express delivery channels by individuals who do not hold a taxpayer identification number (RUC). According to the Plataforma Digital Única del Estado Peruano (Gov.Pe), natural persons may carry out occasional imports or exports with a FOB value per transaction not exceeding USD 1,000, provided that they register no more than three imports or exports per year. It is further reported that it remains unclear whether shipments exceeding this threshold would be treated as commercial activity and could trigger additional income tax obligations. This RUC-related constraint reportedly limits individuals’ ability to import goods for personal use and operates as a barrier to cross-border e-commerce via express delivery in Peru.

Peru does not mandate functional separation for operators with significant market power (SMP) in the telecom market. However, there has been an obligation to separate the accounts since 2019. The Instructions on Accounting Separation in the Telecommunications Sector and the Procedure for Accounting Separation (Resolution No. 161-2019-CD/OSIPTEL) regulate the process for accounting separation in the telecommunications sector.

Peru has appended the World Trade Organization (WTO) Telecom Reference Paper to its schedule of commitments.

It is reported that the Supervisory Body for Private Investment in Telecommunications (OSIPTEL), the executive authority for the supervision and administration of services in the telecommunications sector, is independent from the government in the decision-making process.

Art. 15 of the Law on the Protection of Personal Data and Art. 18 of its corresponding Regulation stipulate that, in cases where the recipient country does not ensure an adequate level of data protection, the data controller must guarantee that the processing of personal data will be carried out in accordance with the Peruvian legal framework. This requirement, however, does not apply in the following circumstances:
- where the transmission of personal data occurs within the context of international judicial cooperation or the implementation of international trade agreements;
- in the context of international cooperation between intelligence agencies;
- when the transfer of personal data is necessary for the performance of a contractual relationship to which the data subject is a party;
- for transfers involving banking and securities operations;
- for the prevention, diagnosis, or medical or surgical treatment of the data subject; and
- where the data subject has given their informed consent to the transfer under these conditions.

Peru has joined several agreements with binding commitments to open transfers of data across borders. These include: the First Amending Protocol [which amends the Additional Protocol to the Framework Agreement of the Pacific Alliance (Arts. 13.11 and. 13.12(c)], the Australia - Peru Free Trade Agreement (Art. 13.11.2), and the Comprehensive and Progressive Agreement for Trans-Pacific Partnership (CPTPP, Art. 14.11.2).

The Law on the Protection of Personal Data and its Regulation establish a comprehensive data protection regime in Peru.