Regulations › Rest of world › Peru
LPDP
Personal Data Protection Law No. 29733
WhenLaw published 3 Jul 2011 and fully effective after its first regulation (2013). The new Regulation (DS 016-2024-JUS, published 30 Nov 2024) took effect 30 Mar 2025, replacing DS 003-2013-JUS; DPO duties phase in through 30 Nov 2028.
Who enforces itAutoridad Nacional de Protección de Datos Personales (ANPD), Ministry of Justice and Human Rights
Who it applies toPublic and private processing of personal data in Peru, and foreign controllers targeting or profiling people in Peru.
Tell the regulatorNotify the Authority within 48 hours of qualifying incidents (large-scale, sensitive data or m…
DPO requiredData protection officer required for public entities, large-scale or sensitive processing, and…
RegistrationCreation, modification and cancellation of personal data banks must be registered (free, autom…
Transfers abroadTransfers allowed to adequate countries or with safeguards such as model clauses
Request deadlineInformation within 8 business days, access 20 business days, rectification, cancellation or op…
Maximum fineUp to 100 UIT (about PEN 535,000, roughly USD 145,000), not exceeding 10% of prior-year gross…
Recent developments
Nothing reported yet. Regulatory Watch lists new rules, enforcement and court decisions as they arrive.
Regulations library
Every US state privacy law, on one map
24 states have a comprehensive privacy law in the library, alongside the EU, UK, US federal and global laws: 102 in all, each explained in plain words with its sources. Select a state to see what applies there.
- In force
- Coming into force
- Sector laws