Global Data Privacy and Cybersecurity Handbook

Peru

Select a Topic
Start Comparison
Security Requirements
Jump to
Security Requirements Start Comparison
Do data privacy laws or regulations impose obligations to maintain information security controls to protect personal data from unauthorized access or processing?

Last review date: 18 January 2024

Yes.

☒   general obligation to take appropriate / reasonable technical, physical and/or organizational security measures

☐   obligation to take specific security measures e.g., encryption

☐   requirement to undertake third party due diligence (security assessment of third party providers)

☒   encryption 

☒   other

  • Information access controls, including access and privileges management, user identification controls and the maintenance of evidence of the interaction with the personal data.
  • Backups copies.
  • Information copy controls.
Do other laws or regulations impose obligations to protect systems from cyberattack?

Last review date: 18 January 2024

☐   public company obligations (e.g., duties to maintain sufficient information security measures or ensure operational resilience to cyberattacks)

☐   network information security requirements (broader than telecommunications)

☒   health regulatory requirements

☐   financial services requirements

☒   telecommunication requirements

☒   providers of critical infrastructure

☒   other

There are obligations to adopt measures to guarantee confidentiality of the information for the marked sectors. The DPA has stated that a cyberattack could breach the duty to guarantee confidentiality.

If yes, please provide brief details of the relevant law or regulation.

Has there been regulatory activity – including enforcement action, investigations, regulatory guidance or other public statements by the regulator – relating to cybersecurity by the following regulators in the last 12 months?

Last review date: 18 January 2024

No

☐   Data privacy

☐   Securities or public company

☐   network information security

☐   health

☐   financial services

☐   telecommunications

☐   critical infrastructure

☐   other

{{ $store.state.loadingScreen.message }} ...