Is a listed company, in Peru

Ley No. 29733, arts. 32-40 and Disposición complementaria final sexta (enforcement, supervisory authority and sanctions) · Read the law's page

• Expect the Autoridad Nacional de Protección de Datos Personales, within the Ministry of Justice and Human Rights, to open an investigation on its own initiative or on complaint, resolve titleholders' claims, and order precautionary or corrective measures or an administrative sanction for a breach of the Law or its regulation.
• Register your personal-data bank in the Registro Nacional de Protección de Datos Personales, and expect any cross-border data-flow communication, sanction, or precautionary or corrective measure to be recorded there too.
• Expect a fine of 0.5 to 5 Tax Units (UIT) for a minor infraction, more than 5 up to 50 UIT for a serious infraction, or more than 50 up to 100 UIT for a very serious infraction, capped at ten percent of your gross annual income for the preceding fiscal year, without prejudice to separate civil or criminal liability.
• Comply with an accessory obligation the sanctioning procedure imposes within its deadline, or expect a coercive fine of up to 10 UIT on top of the underlying sanction.
• Expect the constitutional habeas data process to remain open to a titleholder independently of, and without first requiring, the Law's own administrative procedure before the Authority.