ALERT- PRIVACY AND PERSONAL DATA PROTECCION
The New Regulation of the Personal Data Protection Law enters into force
Its application requires compliance with new mandatory provisions for companies that manage personal data banks. Among the most important are:
- Companies not established in Peruvian territory, to which Peruvian law is applicable, must designate a representative as a point of contact before the National Authority for the Protection of Personal Data.
- Companies must report personal data subjects about the existence of automated decisions, including profiling and its consequences. Profiling is the automated processing of personal data to evaluate certain aspects of the individual and analyze or predict his or her interests, behavior and other attributes.
- Companies must notify the National Authority for Personal Data Protection of certain security incidents within 48 hours of becoming aware of them.
The obligation to appoint a Personal Data Officer will become effective progressively, in accordance with the following:
For further information, please contact Francisco Baldeón (fbaldeon@estudiorodrigo.com) and/or José Govea (jgovea@estudiorodrigo.com).
