New security agenda between Peru and the United States: Implications for companies and suppliers

Recent bilateral announcements between Peru and the United States point to new opportunities in security infrastructure and technology, along with heightened requirements in public procurement, data protection, integrity, and cross-border investigations.

Building on our previous update on Peru’s legal and regulatory environment following the change in presidential administration, we explore how the security aspects of a cooperation agenda recently announced by both Peru and the US could affect companies.

Following Peru’s presidential inauguration ceremony in late July 2026, the US Department of State issued a statement titled “Opportunities for Growth in U.S.-Peru Relations.” The statement outlines a comprehensive bilateral agenda encompassing security, trade and investment, infrastructure, technology, space cooperation, and disaster management. This alert focuses on its security component, which includes efforts to combat transnational organized crime, enhance border security, improve prison infrastructure, implement biometric technologies, and fortify the specialized units within the Peruvian National Police (PNP).

On the Peruvian side, Minister of Foreign Affairs Carlos Espá stated upon taking office that the contribution of foreign policy to combating insecurity and corruption would be the first objective of his tenure, and that coordination with neighboring countries would be reinforced, building on the progress of the Santiago Regional Commitment and Peru’s incorporation into the Shield of the Americas.
While these announcements do not create immediate obligations for the private sector, they may signal a new environment for companies in technology, infrastructure, financial services, mining, logistics, and other sectors exposed to security and cross-border compliance risks.

From political commitment to implementation

The US Department of State’s statement brings together measures at different stages of development. Some correspond to recently expanded capabilities, such as the PNP’s Transnational Criminal Investigative Unit, operated by the US Department of Homeland Security (DHS) with support from the Department of State. Others involve the creation of new capabilities, such as the PNP’s Complex Crime Investigative Unit, a vetted unit funded by the Bureau of International Narcotics and Law Enforcement Affairs (INL) and managed by the Federal Bureau of Investigation (FBI). 

Other initiatives remain under development, including the expansion of biometric data collection in prisons and border areas, the donation of two explosive trace detection machines for Jorge Chávez International Airport, and the participation of US technology suppliers in prison infrastructure plans.

The framework for regional cooperation remains subject to clarification. The US Department of State’s statement describes Peru as a member of the Americans Counter-Cartel Coalition (A3C), while Peru’s Ministry of Foreign Affairs refers to the country’s incorporation into the Shield of the Americas, an initiative launched through a proclamation signed on March 7, 2026, in Miami. According to statements by US officials, the A3C and the Shield of the Americas are not the same instrument: the Shield operates as an overarching framework, and the A3C sits within it without exhausting it, with different membership. Peruvian participation may therefore be formalized through different instruments, with correspondingly different scope and safeguards.

An emerging market for security infrastructure and technology

One of the commercially significant components of the agenda is the meeting the US Department of Commerce will hold in Lima in September 2026 with US industry partners to discuss opportunities connected to the construction of nine new prison facilities.

According to the announcement, the convening is a market outreach and supplier promotion activity rather than a selection or procurement process. The US Department of State’s statement does not commit US financing for construction. The definition of the project portfolio, locations, budgets, technical specifications, and delivery models fall within Peruvian government planning and procurement processes, including the 2026–2028 Prison Decongestion Plan and management documents of the National Penitentiary Institute and the Ministry of Justice and Human Rights.

The agenda points to potential demand in areas such as:

• Construction and management of prison infrastructure
  
  
• Biometric control of inmates, staff, and visitors
  
  
• Video surveillance and image analytics
  
  
• Detection of weapons, explosives, and prohibited substances
  
  
• Access control and screening of individuals, luggage, and vehicles
  
  
• Jamming of unauthorized communications
  
  
• Prison management platforms
  
  
• Cybersecurity and secure communications
  
  
• Forensic and criminal investigation technologies

Relevant considerations for interested companies may include applicable procurement models, requirements for foreign suppliers, the potential need for a local entity or partner, intellectual property protection, system maintenance, technology transfer, and integrity obligations in dealings with public authorities and officials.

Biometrics and data governance considerations

The expansion of biometric data collection in prisons and border areas raises additional considerations for technology suppliers and database operators. 

Projects involving facial recognition, fingerprints, or other identifiers may be subject to Peruvian rules on personal data protection, cybersecurity, and digital government. Matters that remain to be defined include:

• The entity responsible for the database
  
  
• The legal basis and purpose of the processing
  
  
• The entities authorized to access the information and the possible transfer of data to foreign authorities
  
  
• Retention periods and security and traceability measures
  
  
• Procedures for correcting errors or false positives
  
  
• The responsibilities of suppliers that store, integrate, or process the information

These projects are not limited to equipment purchases. Where they involve biometric data or criminal investigation information, they also raise data governance considerations that may require a clear allocation of responsibilities. 

The same agenda includes an artificial intelligence (AI) summit in Lima on September 8, 2026 and the assignment of a cybersecurity advisor to the Peruvian government.

Exposure to cross-border investigations and controls

The announced cooperation may intensify intelligence sharing, parallel investigations, and the traceability of assets and financial transactions. The US Department of State’s Bureau of Counterterrorism will send a US Department of Justice team to Peru to improve coordination and information sharing in actions against Tren de Aragua, and the PNP’s specialized units will be strengthened with the participation of the FBI, DHS, and INL.

For financial institutions, financial technology companies, money remitters, transportation and logistics companies, mining companies, commodity traders, and others, relevant considerations may include the ability to identify sanctioned individuals and entities, determine the ultimate beneficial owner of counterparties, detect indirect relationships with criminal networks, preserve information relevant to investigations, and respond to requests from authorities in different jurisdictions.

Business considerations

While the implementation instruments are being defined, potentially affected companies may wish to take the following proactive measures:

• Mapping exposure to operations, suppliers, clients, or projects connected to security, borders, prison infrastructure, mining, transportation, or financial services
  
  
• Preparing to participate in public-sector projects by reviewing procurement requirements, local structures, alliances, demonstrable track records, and maintenance and support capabilities
  
  
• Updating integrity controls covering public officials, intermediaries, commercial agents, and potential local partners, in line with Peruvian and foreign anti-corruption rules
  
  
• Reviewing data governance considerations, including biometric processing, international transfers, access by authorities, and incident response
  
  
• Strengthening third-party controls, including sanctions, anti-money laundering, ultimate beneficial ownership, and counterparty monitoring

Potential developments to monitor

• The formalization of Peruvian participation in the A3C and the Shield of the Americas, and the instruments supporting that participation
  
  
• The definition of the prison facility portfolio and the applicable procurement regime
  
  
• The September 2026 meeting convened by the US Department of Commerce and the September 8, 2026 AI summit
  
  
• Protocols governing biometrics and international information sharing
  
  
• The business mission of the US International Development Finance Corporation in energy, infrastructure, and critical minerals, and progress related to the expansion of the Port of Callao
  
  
• The publication of procurement processes related to security infrastructure and technology

As these developments unfold, bilateral policy announcements and formally structured projects may present different legal, regulatory, and commercial considerations, particularly where public procurement, technology, data protection, and integrity considerations intersect.

For more information, please contact the authors.

Leer este artículo en español.