🇵🇪
Peru
Personal Data Protection Law No. 29733
Americas🟡 Moderate
Compliance Score
43%
6 Addressed
7 Partial
1 None
Authority
National Authority for Personal Data Protection
Overview
Peru's Personal Data Protection Law, effective 2013, provides a moderate framework. The law applies to both public and private sectors and includes provisions for data subject rights.
14-Topic Coverage Analysis
Data Protection Authority
AddressedConsent Requirements
AddressedData Subject Rights
AddressedCross-Border Transfer
AddressedBreach Notification
PartialDPO Requirements
PartialChildren's Data
PartialPenalties & Enforcement
AddressedSector-Specific Rules
PartialCookie/Tracking
PartialAI & Automated Decisions
NoneData Localisation
PartialSignificant Data Fiduciary
PartialGovernment Data
Addressed? Frequently Asked Questions
What is the primary data protection law in Peru?+
Peru is governed by the Personal Data Protection Law No. 29733. The law is enforced by the National Authority for Personal Data Protection. According to our analysis, the country has a Moderate level of data protection framework.
Does Peru require a Data Protection Officer (DPO)?+
Partially. The Personal Data Protection Law No. 29733 may require a DPO only for specific high-risk organizations or sectors. It is not universally mandatory for all businesses.
What are the data localisation rules in Peru?+
Partially. While Personal Data Protection Law No. 29733 may not mandate general localisation, specific sectoral laws (like finance or health) might require data to be stored locally.
What are the breach notification requirements in Peru?+
The Personal Data Protection Law No. 29733 has limited breach notification requirements. It may only require notifying the regulator, without mandating notification to affected individuals.