On 8 May 2015, the Regulation of the Law on Personal Data Protection was published in Peru and which bears considerable similarity to the Spanish data protection law.
Data controllers will need to register with the Peruvian Data Protection Authority stating the classes of data being processed (particularly in relation to sensitive data), as well as the contact details of the data controller, its policies and procedures (particularly in relation to information security) and information on the rights of data subjects.
We are not aware of the proposed enforcement regime but will publish further information as soon as we can.
The content of this article is intended to provide a general guide to the subject matter. Specialist advice should be sought about your specific circumstances.