Development of disclaimer and the personal data protection policy in Peru
Peru: What is the personal data protection policy?
The current Peruvian law on Personal Data Protection Policy – Law 29733 – aims to ensure the people’s fundamental right to the protection of their privacy. Therefore, the treatment of their personal data must be proportional and safe according to the consensual purposes by such people or authorized by law, thus preventing that such data are trafficked and/or used illicitly.
In UR Global, as knowledgeable experts of the current Peruvian legislation, we take care of drawing up the Disclaimer and Personal Data Protection Policy for the companies in Peru.
Importance of the development of personal data protection policy
The personal data protection policy in Peru establishes obligations to the companies in order to ensure an appropriate treatment of personal data of their clients, suppliers, workers and other people linked to their activity. Furthermore, this legislation and its regulation recognize the rights of people to whom this data belongs.
The main obligations to comply with the personal data protection will be as follows: register with the Authority the Personal Data Bank (BDP) and obtain an informed consent by the holders of personal data.
In accordance with the Law definition, a Personal Data Bank is a completely organized set on information of natural persons. This information can be found stored in automated support (such as documents in Word, Excel, PDF and even in images, audio, audiovisual recorded in computers or company’s servers, e-platforms, files on the cloud, etc.) or non-automated support (such as files and physical recorders, printed invoicing documents, workers’ files, etc.).
Why use UR Global for the development of the data protection policy?
In UR Global, we have specialists in all countries where we operate. Our experts work with companies in Peru given our office in Lima with a team of 30 people.
We know that all Peruvian companies are included within the scope of this law for what its compliance is mandatory by all companies regarding the personal data protection policy.
In UR Global, we are committed to keeping data protection and therefore, the privacy of clients, suppliers and workers of the company we work with, in accordance with the Law 29733, Personal Data Protection Law. We offer personalized attention to our clients and we help and advise them in a professional manner.
Frequently Asked Questions on the development of personal data protection policy in Peru
All public and private companies are included within the scope of this law and therefore, they are obliged to observe the requirements regarding personal data protection policy in the database management. Therefore, security measures that are suitable and effective should be applied. Companies with BDP must adopt technical, organizational and legal measures in order to avoid possible filtration or subtraction of personal data.
Some of these measures include:
- Establishment of technical safety protocols on files in automated and non-automated support.
- Development of privacy policies.
- Development of organizational manuals with cares and responsibilities in the treatment of personal data, confidentiality agreements, contract terms, among others.
The current legislation in Peru requires an adequate treatment of personal data of clients, suppliers, workers and other people linked to the activity of a company. Failing this, violations of the personal data protection law can result in fines between 0.5 to 100 UIT (from S/ 2,150 soles to S/ 430,000).