Peru：数据保护法、网络犯罪、罚款与刑罚
Law 29.733 with a new Regulation in force since Mar 2025, requiring a DPO and 48-hour incident notification.
- Law
- Ley 29.733 + Regulation DS 016-2024-JUS
- Authority
- ANPD-Peru (Ministry of Justice and Human Rights)
- Max fine
- —
- Breach notification
- 48h (2024 Regulation)
- DPO
- Mandatory (new regulation)
Crimes
| Unlawful access | Ley 30096/2013 | 1 to 4 years |
| Computer fraud | Ley 30096/2013 | 3 to 8 years |
| Identity impersonation | Ley 30096/2013 | 3 to 5 years |
Risks
- New DPO obligations
- 48-hour incident notification