Peru
Tier 3 Comprehensive law AmericasPrincipal framework: Law 29733 (2025 regulations) (2011). Regulator: ANPD (MINJUS). Law 29733 was substantially rebooted by the 2025 regulations (DS 016-2024-JUS): breach deadlines, DPOs, portability and extraterritorial scope.
At a glance
- Principal law
- Law 29733 (2025 regulations)
- Regulator
- ANPD (MINJUS)
- Breach notification
- 48 hours to the ANPD under the 2025 regulations
- Maximum penalty
- Tiered UIT-based fines, raised by the 2025 framework
- DPO required
- DPO mandatory for larger controllers under the 2025 regulations
- Digital consent age
- Parental consent below 14; 14–17 with capacity
- Extraterritorial reach
- Yes — offering goods or services in Peru
Structure
- Structural pattern
- Not assessed
- Sub-jurisdictions
- None — no sub-national axis
- ISO code
- PE
A Pattern 4 jurisdiction has no sub-national layer to model. Devolution elsewhere in the legal system does not imply it here — check each Act rather than reasoning from the country.
Transfers and adequacy
- EU member
- No
- EEA member
- No
Instruments
No instrument profiled yet.
Sources
No source recorded yet. This record cannot rise above Tier 3 until it has one — see depth tiers.
Never independently verified — seeded from the prototype.