Peru: Closed consultation on draft Regulation of the Data Protection Law including data protection regulation

On 24 September 2023, the Government of the Peruvian State has closed the public consultation on the draft Regulation of the Personal Data Protection Law - an implementing regulation including data protection regulation. The Regulation aims to define new legal categories and principles for data protection, including incident reporting and impact assessments. Specifically, the Regulation establishes requirements for the processing of personal data, defines the conditions for valid consent, establishes rules for the processing of special categories of personal data, and sets out data subject rights. The Regulation also sets out sanctions procedures and measures.