DPDPA is now in force in India. Run a free privacy scan on your site. Scan now

馃嚨馃嚜 Latin America & Caribbean

Cookie consent in Per煤

Consent and privacy law in Per煤

In short
Peru's Personal Data Protection Law No. 29733 dates from 2011 and is overseen by the National Authority for the Protection of Personal Data. A new implementing regulation took effect in 2023, modernising the regime and strengthening obligations around consent, security, and breach handling. Peru historically operated a registry of personal data banks. Consent must generally be prior, free, express, informed, and unequivocal, which aligns it with an opt-in approach, and sensitive data requires written consent. Privacy notices in Spanish are expected. Cross border transfer rules apply, and the authority has become more active under the updated regulation.
Status

Law No. 29733 since 2011, with a new implementing regulation in force from 2023

Primary law
Law 29733
Languages

es-419

Who must comply

Owners and processors of personal databases located in Peru or processing personal data of individuals in Peru.

Penalties

Fines tied to tax units, reaching substantial amounts for serious violations

Key obligations

  • Obtain prior, informed and express consent
  • Register databases with the national authority
  • Provide clear notice of purpose and recipients
  • Honor access, rectification, cancellation and opposition rights
  • Apply appropriate security measures

Local guidance

  • Apply the updated implementing regulation from 2023
  • Use prior, free, express, informed, and unequivocal consent
  • Provide notices in Spanish
  • Check cross border transfer requirements

How ConsentX helps

  • Prior and express opt-in consent capture
  • Purpose and recipient notice in the banner
  • Rights request intake for access and cancellation
  • Consent receipts for evidence
  • Region rule engine tuned for Peru
Get started free
yoursite.com
馃嚨馃嚜 Peru

We value your privacy

We ask for your consent before any non-essential cookie, with the rules that apply in your region.

Allow allReject non-essentialManage preferences

This page is a plain-English summary for general information and is not legal advice. Confirm your obligations with qualified local counsel.

How to comply with Peru using ConsentX

  1. 1

    Scan your website

    Run a free scan to find every cookie and tracker on your site, so you know exactly what needs consent under Peru.

  2. 2

    Show a geo-aware consent banner

    Add the ConsentX banner. It detects each visitor region and shows the consent experience that Peru requires, automatically.

  3. 3

    Block trackers until consent

    Keep non-essential cookies and trackers blocked until the visitor agrees, so nothing fires before consent.

  4. 4

    Record tamper-evident proof

    Every choice is stored as a tamper-evident consent receipt you can produce in a Peru audit.

  5. 5

    Handle data requests on time

    Use the built-in DSAR workflow with SLA timers to answer access, deletion and opt-out requests within the legal deadline.

Frequently asked questions

Did Peru update its privacy regulation?+

Yes. A new implementing regulation took effect in 2023, modernising Peru's 2011 Personal Data Protection Law and strengthening obligations on consent, security, and breach handling.

What kind of consent does Peru require?+

Consent must generally be prior, free, express, informed, and unequivocal, which aligns with an opt-in approach. Sensitive data requires written consent.