Did Peru update its privacy regulation?

Yes. A new implementing regulation took effect in 2023, modernising Peru's 2011 Personal Data Protection Law and strengthening obligations on consent, security, and breach handling.

What kind of consent does Peru require?

Consent must generally be prior, free, express, informed, and unequivocal, which aligns with an opt-in approach. Sensitive data requires written consent.

América Latina e Caraíbas

Consentimento de cookies em Perú

Consentimento e proteção de dados em Perú

Peru's Personal Data Protection Law No. 29733 dates from 2011 and is overseen by the National Authority for the Protection of Personal Data. A new implementing regulation took effect in 2023, modernising the regime and strengthening obligations around consent, security, and breach handling. Peru historically operated a registry of personal data banks. Consent must generally be prior, free, express, informed, and unequivocal, which aligns it with an opt-in approach, and sensitive data requires written consent. Privacy notices in Spanish are expected. Cross border transfer rules apply, and the authority has become more active under the updated regulation.

Autoridade

Autoridad Nacional de Protección de Datos Personales

Estado

Law No. 29733 since 2011, with a new implementing regulation in force from 2023

Lei principal

Law 29733

Idiomas

Español (Latinoamérica)

Quem tem de cumprir

Law 29733 applies to organisations and other entities that process personal data within the scope of Peru’s data protection framework.

Sanções

Fines tied to tax units, reaching substantial amounts for serious violations

Obrigações principais

Obtain valid consent where consent is the applicable legal basis.
Ensure consent is free, prior, express, unequivocal, and informed.
Clearly communicate the purpose of data processing.
Provide appropriate privacy information to individuals.
Respect data subject rights.
Implement appropriate technical and organisational security measures.
Register personal data databases where registration is required.
Establish procedures for handling data subject requests.
Assess requirements for international transfers and disclosures.
Maintain appropriate evidence demonstrating compliance.

Orientações locais

Apply the updated implementing regulation from 2023
Use prior, free, express, informed, and unequivocal consent
Provide notices in Spanish
Check cross border transfer requirements

Como a ConsentX ajuda

Prior and express consent capture: Capture consent before applicable cookies, trackers, or processing activities are activated.
Purpose-based consent: Present clear information about the purposes for which personal data and tracking technologies are used.
Cookie and tracker management: Scan websites to identify cookies and trackers and control the activation of applicable non-essential technologies.
Consent records: Create auditable consent records containing information about users’ choices and the consent event.
Data subject request management: Support workflows for receiving and managing privacy requests, including access, rectification, cancellation, and opposition requests.
Regional compliance: Apply jurisdiction-specific consent rules through ConsentX’s region rule engine.

Começar gratuitamente

yoursite.com

Perú

Valorizamos a sua privacidade

Pedimos o seu consentimento antes de qualquer cookie não essencial, de acordo com as regras aplicáveis na sua região.

Aceitar tudoRecusar não essenciaisGerir preferências

Consentimento registado

sha256 · chain ok

Esta página foi traduzida automaticamente e pode conter erros. Reveja os detalhes jurídicos com um advogado local qualificado antes de confiar nela.

Prepare Perú com a ConsentX

Banners por região, bloqueio prévio de scripts, DSAR e provas invioláveis.

Começar gratuitamente Marcar uma demonstração

Como cumprir o Perú com a ConsentX

1
Analise o seu site
Execute uma análise gratuita para encontrar todos os cookies e rastreadores do seu site e saber exatamente o que exige consentimento ao abrigo do Perú.
2
Mostre um banner adaptado à região
Adicione o banner da ConsentX. Deteta a região de cada visitante e mostra automaticamente a experiência de consentimento exigida pelo Perú.
3
Bloqueie rastreadores até ao consentimento
Mantenha cookies e rastreadores não essenciais bloqueados até a pessoa aceitar, para que nada seja acionado antes do consentimento.
4
Registe prova inviolável
Cada escolha é guardada como um recibo de consentimento inviolável que pode apresentar numa auditoria ao Perú.
5
Responda aos pedidos dentro do prazo
Use o fluxo DSAR integrado com temporizadores de SLA para responder a pedidos de acesso, apagamento e oposição dentro do prazo legal.