Peru: Closed consultation on draft Regulation of the Data Protection Law including cybersecurity regulation

On 24 September 2023, the Government of the Peruvian State has closed the public consultation on the draft Regulation of the Personal Data Protection Law - an implementing regulation including cybersecurity regulation. The Regulation aims to define new legal categories and principles for data protection, including incident reporting and impact assessments. Specifically, the Regulation includes details on cybersecurity obligations for processors of personal data. It also requires processors to notify security incidents affecting personal data within 48 hours.