In order to provide for the effective implementation of the AEOI Standard, in Peru:
the Superintendencia Nacional de Aduanas y de Administración Tributaria (SUNAT, the tax authority) has the responsibility to ensure the effective implementation of the due diligence and reporting obligations by Reporting Financial Institutions and for exchanging the information with Peru’s exchange partners;
technical solutions necessary to receive and validate the information reported by Reporting Financial Institutions were put in place through the Integral System of Reception and Automatic Exchange of Information, which is based on the Multiple Data Exchange Solution (MDES) and allows for validation of the data received from Reporting Financial Institutions; and
the Common Transmission System (CTS) is used for the exchange of the information, along with the associated file preparation and encryption requirements.
It should be noted that the review of Peru’s legal frameworks implementing the AEOI Standard concluded with the determination that Peru’s domestic legal framework is In Place But Needs Improvement and its international legal framework is In Place. This has been taken into account when reviewing the effectiveness of Peru’s implementation of the AEOI Standard in practice and where particular identified gaps in Peru’s legal frameworks directly impact its implementation in practice, these are mentioned below.
Findings and conclusions on the legal frameworks
The detailed findings and conclusions on the AEOI legal frameworks for Peru are below, organised per Core Requirement (CR) and sub-requirement (SR), as extracted from the AEOI Terms of Reference (see Annex C).
CR1 Domestic legal framework: Jurisdictions should have a domestic legislative framework in place that requires all Reporting Financial Institutions to conduct the due diligence and reporting procedures in the CRS, and that provides for the effective implementation of the CRS as set out therein.
Determination: In Place But Needs Improvement
Peru’s domestic legislative framework is in place and contains most of the key aspects of the CRS and its Commentary requiring Reporting Financial Institutions to conduct the due diligence and reporting procedures, but it needs improvement in relation to the scope of Reporting Financial Institutions required to report information (SR 1.1), the scope of Financial Accounts required to be reported (SR 1.2) and the framework to enforce the requirements (SR 1.4). Most significantly, Peru’s legislative framework does not define Financial Institutions in accordance with the AEOI Standard nor does it contain rules to prevent practices intended to circumvent the reporting and due diligence procedures as required.
SR 1.1 Jurisdictions should define the scope of Reporting Financial Institutions consistently with the CRS.
Peru has defined the scope of Reporting Financial Institutions in its domestic legislative framework in a manner that is largely consistent with the CRS and its Commentary. However, a deficiency has been identified. More specifically, Peru has defined Financial Institutions with reference to entities described in other financial law, which will include entities that are not Financial Institutions under the AEOI Standard. The scope of Reporting Financial Institutions is material to the proper functioning of the AEOI Standard.
Recommendations:
Peru should amend its domestic legislative framework to ensure that the meaning of “Custodial Institution”, “Investment Entity” and “Specified Insurance Company” are defined in line with the AEOI Standard.
SR 1.2 Jurisdictions should define the scope of Financial Accounts and Reportable Accounts consistently with the CRS and incorporate the due diligence procedures to identify them.
Peru has defined the Financial Accounts that are required to be reported in its domestic legislative framework and incorporated the due diligence procedures that must be applied to identify them in a manner that is largely consistent with the CRS and its Commentary. However, deficiencies have been identified. More significantly, Peru’s legislative framework:
does not limit the use of a mailing address when applying the residence address test only to the special circumstances as contemplated in the Commentary; and
does not define annuity contracts in line with the AEOI Standard.
The scope of Financial Accounts and the due diligence procedures are material to the proper functioning of the AEOI Standard.
Recommendations:
Peru should amend its domestic legislative framework to ensure that a mailing address is only permitted to be used in the special circumstances permitted under the AEOI Standard.
Peru should amend its domestic legislative framework to ensure that the exclusion of retirement income contracts from the definition of annuity contract is in line with the AEOI Standard.
SR 1.3 Jurisdictions should incorporate the reporting requirements contained in Section I of the CRS into their domestic legislative framework.
Peru has incorporated the reporting requirements in its domestic legislative framework in accordance with the CRS and its Commentary.
Recommendations:
No recommendations made.
SR 1.4 Jurisdictions should have a legislative framework in place that allows for the enforcement of the requirements of the CRS in practice.
Peru has a legislative framework in place to enforce the requirements in a manner that is largely consistent with the CRS and its Commentary. However, deficiencies have been identified. More specifically, Peru’s legislative framework:
does not include rules to prevent all relevant persons (including Reporting Financial Institutions, other persons and intermediaries) from adopting any practices intended to circumvent the reporting and due diligence procedures as required; and
does not impose sanctions on Account Holders and Controlling Persons for the provision of a false self-certification.
These are the key elements of the required enforcement framework relates to and are therefore material to the proper functioning of the AEOI Standard.
Recommendations:
Peru should amend its domestic legislative framework to introduce rules to prevent Financial Institutions, persons and intermediaries from adopting practices intended to circumvent the due diligence and reporting procedures.
Peru should amend its domestic legislative framework to include sanctions on Account Holders and Controlling Persons for the provision of a false self-certification.
CR2 International legal framework: Jurisdictions should have exchange relationships in effect with all Interested Appropriate Partners as committed to and that provide for the exchange of information in accordance with the Model CAA.
Determination: In Place
Peru’s international legal framework to exchange the information is in place, is consistent with the Model CAA and its Commentary and provides for exchange with all of Peru’s Interested Appropriate Partners (i.e. all jurisdictions that are interested in receiving information from Peru and that meet the required standard in relation to confidentiality and data safeguards) (SRs 2.1 – 2.3).
SR 2.1 Jurisdictions should have exchange agreements in effect with all Interested Appropriate Partners that permit the automatic exchange of CRS information.
Peru has exchange agreements that permit the automatic exchange of CRS information in effect with all its Interested Appropriate Partners.
Recommendations:
No recommendations made.
SR 2.2 Such an exchange agreement should be put in place without undue delay, following the receipt of an expression of interest from an Interested Appropriate Partner.
Peru put in place its exchange agreements without undue delay.
Recommendations:
No recommendations made.
SR 2.3 Jurisdictions should ensure that the exchange agreements in effect provide for the exchange of information in accordance with the requirements of the Model CAA.
Peru’s exchange agreements provide for the exchange of information in accordance with the requirements of the Model CAA.
Recommendations:
No recommendations made.
Assessed jurisdiction’s comments on the assessment of its legal frameworks
Please note that Peru has introduced amended Supreme Decree N° 256-2018-EF by means of Supreme Decree N° 139-2024-EF in order to remedy the deficiencies identified in the AEOI peer review related with sub requirements 1.1 and 1.2.
Findings and conclusions in relation to effectiveness in practice
The following table contains the detailed findings for Peru, organised per Core Requirement (CR) and then per sub-requirement (SR) as extracted from the AEOI Terms of Reference.
CR1 Effectiveness in practice: Jurisdictions should ensure that in practice Reporting Financial Institutions correctly implement the due diligence and reporting procedures, which includes a requirement for jurisdictions to have in place an administrative framework to ensure the effective implementation of the CRS.
Rating: On Track
Peru’s implementation of the AEOI Standard is on track with respect to ensuring that Reporting Financial Institutions are correctly conducting the due diligence and reporting procedures and are therefore reporting complete and accurate information. This includes ensuring effectiveness in a domestic context, such as through having an effective administrative compliance framework and related procedures (SR 1.5), and collaborating with exchange partners to ensure effectiveness (SR 1.6). Peru is encouraged to continue its implementation process to ensure its ongoing effectiveness.
SR 1.5 Jurisdictions should ensure that in practice Reporting Financial Institutions identify the Financial Accounts they maintain, identify the Reportable Accounts among those Financial Accounts, as well as their Account Holders, and where relevant Controlling Persons, by correctly conducting the due diligence procedures and collect and report the required information with respect to each Reportable Account. This includes having in place:
a) an effective administrative compliance framework to ensure the effective implementation of, and compliance with, the CRS. This framework should:
i. be based on a strategy that facilitates compliance by Reporting Financial Institutions and which is informed by a risk assessment in respect of the effective implementation of the CRS that takes into account relevant information sources (including third party sources);
ii. include procedures to ensure that Financial Institutions correctly apply the definitions of Reporting Financial Institutions and Non-Reporting Financial Institutions;
iii. include procedures to periodically verify Reporting Financial Institutions’ compliance, conducted by authorities that have adequate powers with respect to the reviewed Reporting Financial Institutions, with procedures to access the records they maintain; and
b) effective procedures to ensure that Financial Institutions, persons or intermediaries do not circumvent the due diligence and reporting procedures;
c) effective enforcement mechanisms to address non-compliance by Reporting Financial Institutions;
d) strong measures to ensure that valid self-certifications are always obtained for New Accounts;
e) effective procedures to ensure that each, or each type of, jurisdiction-specific Non-Reporting Financial Institution and Excluded Account continue to present a low risk of being used to evade tax; and
f) effective procedures to follow up with a Reporting Financial Institution when undocumented accounts are reported in order to establish the reasons why such information is being reported.
Findings:
In order to ensure that Reporting Financial Institutions correctly conduct the due diligence and reporting procedures, Peru implemented most of the requirements in accordance with expectations. The key findings were as follows:
Peru implemented an overarching strategy to ensure compliance with the AEOI Standard and has conducted a risk assessment that took into account a range of relevant information sources, such as the type and size of the RFIs, information from the AML regulator, compliance behaviour for domestic tax purposes regimes, as well as an analysis of the information reported under the AEOI Standard. Peru’s compliance strategy facilitates compliance and incorporates a credible approach to enforcement. Peru intends to keep its compliance strategy and risk assessment under review to ensure its effectiveness on an ongoing basis.
Peru has taken action to understand its population of Reporting Financial Institutions utilising relevant information sources such as the list of companies with reporting obligations to the SUNAT (e.g. the Financial Information Report, by which all financial accounts opened in Peru are required to be declared and reporting in relation to withholding tax obligations on mutual funds, investment funds and fideicomisos), information from the Financial Intelligence Unit (FIU), from the tax databases and from industry associations, information on the companies regulated by the Superintendency of Banks, Insurance and Private Pension Funds, and the list of Foreign Financial Institutions for FATCA purposes. Peru is taking action to ensure that Reporting Financial Institutions identified are classifying themselves correctly under its domestic rules and ensuring that they report information as required. Peru intends to keep its understanding of its Financial Institution population up to date on a routine basis.
The SUNAT, the institution responsible for implementing Peru’s compliance strategy, appears to have the necessary powers and resources to discharge its functions. With respect to resourcing, Peru has assigned twelve staff to monitor and ensure compliance by Reporting Financial Institutions, to conduct risk assessment as well as to receive information from RFIs and subsequently exchanging it with exchange partners, which have access to IT systems and tools to carry out their functions. The staff are only allocated full time to AEOI-related tasks on reporting/exchange period. Overall, they appear to have effectively started to implement an operational plan to verify compliance with the requirements, incorporating appropriate compliance activities.
Peru has started conducting some compliance activities based on a risk-based approach, in particular desk-based reviews, which can include the inspection of records held by Reporting Financial Institutions. So far, the reviews have led to the identification of several Reportable Accounts for which information was not reported or for which information was incorrectly reported. Peru is also planning to expand its in-depth verification activities through carrying out onsite audits in the near future.
Peru has defined procedures to ensure self-certifications are obtained as required, although has not yet begun to implement them. Peru follows up on undocumented accounts when they are reported.
Peru has developed and documented procedures to enforce the requirements, including the application of penalties and sanctions for non-compliance when it is identified. It has imposed sanctions on Reporting Financial Institutions that have failed to report on time.
Peru does not yet have a complete plan to take action to address circumvention of the requirements when such circumvention is detected, although it is taking steps to develop such plan. This reflects its lack of a legal basis to do so, although it is noted that such cases have not yet been identified. Peru is working to implement an anti-avoidance rule applicable to the AEOI Standard.
It is noted that Peru does not have a jurisdiction-specific list of Non-Reporting Financial Institutions or Excluded Accounts for ongoing monitoring.
Table 3 provides a summary of the specific activities undertaken, or that are planned to be undertaken, in relation to each of the key parts of the framework described above.
Table.9. Activities undertaken