Elaboration of the disclaimer and personal data protection policy in Peru.

Q: When should a data protection policy be implemented?

All public and private companies are included in the scope of this law and are therefore in the obligation to observe the Data Protection Policy requirements in the management of personal databases. Therefore, appropriate and effective security measures must be implemented: Companies holding PDBs must adopt technical, organizational and legal measures in order to prevent the possible leakage or theft of personal data. Some of these measures include: The establishment of technical security protocols for archives on automated and non-automated media. The development of privacy policies The preparation of organizational manuals that assign care and responsibilities in the processing of personal data, confidentiality commitments and contractual clauses, among others.

Peru: What is the Personal Data Protection Policy?

The personal data protection policy in Peru is governed by the current Personal Data Protection Law – Law 29733 – and aims to guarantee the fundamental right of individuals to the protection of their privacy. For which it prescribes that the processing of their personal data be proportional and secure, in accordance with purposes consented to by such persons or authorized by law, thus preventing such data from being trafficked and/or used illicitly.

As experts in current Peruvian regulations, we at UR Global are responsible for drafting the disclaimer and privacy policy for companies in Peru.

Importance of the elaboration of the Personal Data Protection policy

The Protection of Personal Data in Peru establishes obligations on companies to ensure adequate treatment of the personal data of their customers, suppliers, workers and other persons linked to their activity. Likewise, this legislation and its regulations recognize the rights of the persons to whom such data belong.

The main obligations to comply with the Personal Data Protection will therefore be: Register with the Authority the Personal Data Banks (PDBs) they possess and obtain informed consent from the holders of the personal data.

According to the definition of the Law, a Personal Data Bank is any organized set of information of natural persons. This information may be stored in automated media (such as Word, Excel, PDF documents and even images, audio or audiovisual files, recorded on company computers or servers, electronic platforms, cloud files, etc.); or in non-automated media (such as physical files and filing cabinets, printed invoicing documents, employee files, etc.).

Why UR Global for the elaboration of the data protection policy?

At UR Global, we have specialists in all the countries in which we operate. Our experts work with companies in Peru due to our office in Lima, with a team of 30 people.

We know that all Peruvian companies are included in the scope of this law, so compliance is mandatory by all of them in terms of Personal Data Protection Policy.

At UR Global, we are committed to safeguarding the protection of information and therefore, the privacy of customers, suppliers, collaborators of the company we work with, according to the provisions of Law 29733, Personal Data Protection Law. We offer a personalized attention to our clients and we help and advise them in a professional way.

Frequently asked questions about trademark registration

When should a data protection policy be implemented?

All public and private companies are included in the scope of this law and are therefore in the obligation to observe the Data Protection Policy requirements in the management of personal databases.

Therefore, appropriate and effective security measures must be implemented: Companies holding PDBs must adopt technical, organizational and legal measures in order to prevent the possible leakage or theft of personal data.

Some of these measures include:

The establishment of technical security protocols for archives on automated and non-automated media.
The development of privacy policies
The preparation of organizational manuals that assign care and responsibilities in the processing of personal data, confidentiality commitments and contractual clauses, among others.

Peru: What is the risk of not having a data protection policy in place?

The legislation in force in Peru requires an adequate treatment of the personal data of customers, suppliers, collaborators, workers and other persons linked to the activity of a company. If not complied with, violations of the Personal Data Protection Law may derive in fines of between 0.5 to 100 UIT (from S/ 2,150 soles to S/ 430,000)..