Peru’s data protection authority (ANPD) has sharpened its stance on proportionality in data use. Companies can no longer rely on practices like photographing customer ID cards during product delivery — deemed excessive and unnecessary under Peru’s Personal Data Protection Law.
At the same time, a new law (No. 32323) reshapes rules on unsolicited communications. The old model of “contact unless refused” is replaced with a strict opt-in regime: businesses may only reach out if consumers proactively request contact.
For multinationals, this signals:
1. A growing intolerance for “business as usual” data collection practices.
2. Increased risk of sanctions if proportionality is ignored.
3. A stricter consent standard in customer engagement, aligning Peru closer to EU-style regimes.
The message is clear:
Minimize data, respect proportionality, and secure consent before engagement.
S8fe.ai helps businesses stay compliant, minimize risk, and build customer trust with AI-driven data governance.
Source: https: //https://lnkd.in/dJkiHgbC