Law 29733
Personal Data Protection Law (Law 29733)
Peru
In force since 2011
Americas
Who must comply
Owners and processors of personal databases located in Peru or processing personal data of individuals in Peru.
Penalties
Fines graded from minor to very serious, reaching up to 100 tax units (UIT), which can amount to a significant sum in Peruvian soles.
Key obligations
- Obtain prior, informed and express consent
- Register databases with the national authority
- Provide clear notice of purpose and recipients
- Honor access, rectification, cancellation and opposition rights
- Apply appropriate security measures
How ConsentX helps
Prior and express opt-in consent capture
Purpose and recipient notice in the banner
Rights request intake for access and cancellation
Consent receipts for evidence
Region rule engine tuned for Peru
Get Law 29733 ready with ConsentX
This page is a plain-English summary for general information and is not legal advice. Confirm your obligations with qualified local counsel.
How to comply with Law 29733 using ConsentX
- 1
Scan your website
Run a free scan to find every cookie and tracker on your site, so you know exactly what needs consent under Law 29733.
- 2
Show a geo-aware consent banner
Add the ConsentX banner. It detects each visitor region and shows the consent experience that Law 29733 requires, automatically.
- 3
Block trackers until consent
Keep non-essential cookies and trackers blocked until the visitor agrees, so nothing fires before consent.
- 4
Record tamper-evident proof
Every choice is stored as a tamper-evident consent receipt you can produce in a Law 29733 audit.
- 5
Handle data requests on time
Use the built-in DSAR workflow with SLA timers to answer access, deletion and opt-out requests within the legal deadline.
Frequently asked questions
Does Peru require opt-in consent?+
Yes. Law 29733 requires prior, informed, express and unequivocal consent, with stricter conditions for sensitive data.
Who enforces Peru's data protection law?+
The National Authority for the Protection of Personal Data, the APDP, supervises and enforces the law.