Did Peru update its privacy regulation?

Yes. A new implementing regulation took effect in 2023, modernising Peru's 2011 Personal Data Protection Law and strengthening obligations on consent, security, and breach handling.

What kind of consent does Peru require?

Consent must generally be prior, free, express, informed, and unequivocal, which aligns with an opt-in approach. Sensitive data requires written consent.

Latijns-Amerika en de Cariben

Cookietoestemming in Perú

Toestemming en privacyrecht in Perú

Peru's Personal Data Protection Law No. 29733 dates from 2011 and is overseen by the National Authority for the Protection of Personal Data. A new implementing regulation took effect in 2023, modernising the regime and strengthening obligations around consent, security, and breach handling. Peru historically operated a registry of personal data banks. Consent must generally be prior, free, express, informed, and unequivocal, which aligns it with an opt-in approach, and sensitive data requires written consent. Privacy notices in Spanish are expected. Cross border transfer rules apply, and the authority has become more active under the updated regulation.

Toezichthouder

Autoridad Nacional de Protección de Datos Personales

Status

Law No. 29733 since 2011, with a new implementing regulation in force from 2023

Belangrijkste wet

Law 29733

Talen

Español (Latinoamérica)

Voor wie het geldt

Law 29733 applies to organisations and other entities that process personal data within the scope of Peru’s data protection framework.

Sancties

Fines tied to tax units, reaching substantial amounts for serious violations

Belangrijkste verplichtingen

Obtain valid consent where consent is the applicable legal basis.
Ensure consent is free, prior, express, unequivocal, and informed.
Clearly communicate the purpose of data processing.
Provide appropriate privacy information to individuals.
Respect data subject rights.
Implement appropriate technical and organisational security measures.
Register personal data databases where registration is required.
Establish procedures for handling data subject requests.
Assess requirements for international transfers and disclosures.
Maintain appropriate evidence demonstrating compliance.

Lokale richtsnoeren

Apply the updated implementing regulation from 2023
Use prior, free, express, informed, and unequivocal consent
Provide notices in Spanish
Check cross border transfer requirements

Hoe ConsentX helpt

Prior and express consent capture: Capture consent before applicable cookies, trackers, or processing activities are activated.
Purpose-based consent: Present clear information about the purposes for which personal data and tracking technologies are used.
Cookie and tracker management: Scan websites to identify cookies and trackers and control the activation of applicable non-essential technologies.
Consent records: Create auditable consent records containing information about users’ choices and the consent event.
Data subject request management: Support workflows for receiving and managing privacy requests, including access, rectification, cancellation, and opposition requests.
Regional compliance: Apply jurisdiction-specific consent rules through ConsentX’s region rule engine.

Gratis beginnen

yoursite.com

Perú

Uw privacy is belangrijk voor ons

We vragen uw toestemming vóór elke niet-essentiële cookie, volgens de regels die in uw regio gelden.

Alles toestaanNiet-essentiële weigerenVoorkeuren beheren

Toestemming vastgelegd

sha256 · chain ok

Deze pagina is machinaal vertaald en kan fouten bevatten. Laat de juridische details controleren door een gekwalificeerde lokale jurist voordat u erop vertrouwt.

Maak Perú klaar met ConsentX

Regiobewuste banners, scriptblokkering vooraf, DSAR en manipulatiebestendig bewijs.

Gratis beginnen Demo boeken

Zo voldoet u aan Perú met ConsentX

1
Scan uw website
Voer een gratis scan uit om elke cookie en tracker op uw site te vinden, zodat u precies weet waarvoor Perú toestemming vereist.
2
Toon een regiobewuste toestemmingsbanner
Voeg de ConsentX-banner toe. Die herkent de regio van elke bezoeker en toont automatisch de toestemming die Perú vereist.
3
Blokkeer trackers tot toestemming
Houd niet-essentiële cookies en trackers geblokkeerd totdat de bezoeker akkoord gaat, zodat er niets afgaat vóór toestemming.
4
Leg manipulatiebestendig bewijs vast
Elke keuze wordt opgeslagen als een manipulatiebestendig toestemmingsbewijs dat u bij een Perú-audit kunt overleggen.
5
Handel verzoeken op tijd af
Gebruik de ingebouwde DSAR-workflow met SLA-timers om inzage-, verwijderings- en bezwaarverzoeken binnen de wettelijke termijn te beantwoorden.