Skip to content
Regulations.

Peru PDPL and 2024 Regulation

Amended Peru · In force Mar 30, 2025 · next deadline Nov 30, 2026 (in 2 months)

Official text
Add to calendar
Apple Calendar or OutlookGoogle Calendar Download .ics

Deadlines

DateWhat happens
Coming up
Nov 30, 2026in 2 monthsDPO required: medium companies
Nov 30, 2027in 1 yearDPO required: small companies
Nov 30, 2028in 2 yearsDPO required: micro companies
Earlier
Nov 30, 202510 months agoDPO required: large companies
Sep 30, 202512 months agoData portability appliestentative
Mar 30, 20251 year agoNew regulation in force
Nov 30, 20241 year agoNew regulation published

Summaries for reference, not legal advice. Check the official text.

What it does

Peru's 2011 data protection law now runs under a new regulation that replaced the 2013 rules. The regulation adds 48-hour breach notification to the authority, data protection officers phased in by company size, data portability, stronger rules for processors and cross-border transfers, and detailed sanctions procedures.

Who it applies to
Controllers and processors of personal data in Peru, and processing outside Peru in cases set by the regulation.
Penalties
Fines under Law 29733 graded by severity up to 100 UIT per infraction, plus coercive fines of up to 100 UIT for failing to follow orders.
Enforced by
Autoridad Nacional de Protección de Datos Personales (Ministerio de Justicia y Derechos Humanos)
Official name
Ley N° 29733, Ley de Protección de Datos Personales, and its Regulation (Decreto Supremo N° 016-2024-JUS)
Citation
Ley N° 29733; Decreto Supremo N° 016-2024-JUS
Topics
privacy, breach-notification, data-residency
Verified 2026-09-25
Research notes

enacted_date is the regulation's publication date; Law 29733 itself dates from 2011. The 2025-09-30 portability date is computed as six months after entry into force, hence tentative.

Related

Alberta POPAArgentina Law 25.326Brazil ECA DigitalBrazil LGPDCanada Bill C-36 (PPCDA)Canada Bill C-8 / CCSPAChile Personal Data Protection Law (Ley 21.719)Mexico LFPDPPP 2025
Questions about Peru PDPL and 2024 Regulation
What are the Peru PDPL and 2024 Regulation compliance deadlines?
Nov 30, 2024: New regulation published. Mar 30, 2025: New regulation in force. Sep 30, 2025: Data portability applies (tentative). Nov 30, 2025: DPO required: large companies. Nov 30, 2026: DPO required: medium companies. Nov 30, 2027: DPO required: small companies. Nov 30, 2028: DPO required: micro companies.
When does Peru PDPL and 2024 Regulation take effect?
Peru PDPL and 2024 Regulation took effect on Mar 30, 2025. The next milestone is Nov 30, 2026: DPO required: medium companies.
Who does Peru PDPL and 2024 Regulation apply to?
Controllers and processors of personal data in Peru, and processing outside Peru in cases set by the regulation.
What are the penalties under Peru PDPL and 2024 Regulation?
Fines under Law 29733 graded by severity up to 100 UIT per infraction, plus coercive fines of up to 100 UIT for failing to follow orders.

Rule changes by email

The morning after a new data, privacy or AI law, or a deadline change; nothing in quiet weeks.

Double opt-in. Unsubscribe any time.