Log in Get for free
Free scan About Support Contact
Get Velo

Already have an account? Log in

Regulations

Peru's Ley 29733,
prior consent by default.

Peru's Personal Data Protection Law asks for consent that is free, prior, express, unequivocal and informed. Velo starts every consent signal denied until visitors make that choice.

Get for free Scan your site

The rule,
at a glance.

General information, checked September 2026. Not legal advice.

Applies to
Processing of personal data in Peru.
The rules
Ley 29733 of 2011 and its regulation, Supreme Decree 016-2024-JUS.
Consent model
Free, prior, express, unequivocal and informed consent. Written consent for sensitive data.
Enforced by
The Autoridad Nacional de Protección de Datos Personales, within the Ministry of Justice.
Maximum fine
Up to 100 UIT for the most serious infractions, and never more than 10% of the company's gross annual income.
Velo default
Every Consent Mode v2 signal starts denied, with the banner in Spanish.

What Ley 29733 asks.
What Velo does.

The Velo mascot behind a clay globe with two location pins, each linked to its own small consent banner, on a lavender studio backdrop.

Prior consent for visitors in Peru

Velo reads the visitor's country at the edge. Visitors in Peru start opt in, with every Consent Mode v2 signal denied until they choose.

The Velo mascot sliding a script row from a checked list into a stack of category trays, on a lavender studio backdrop.

Unequivocal choices, in Spanish

The banner ships in Spanish and asks for an active choice per category, never a box ticked in advance.

The Velo mascot between a clay checklist and a receipt with a verified seal, on a lavender studio backdrop.

Proof you can show

Each decision is stored with a receipt id, the region and the banner version, so you can show when and how consent was given.

The Velo mascot pointing at a clay consent dashboard with a donut chart and bars, on a lavender studio backdrop.

Change your mind any time

The floating button reopens preferences, and each change is saved as a new record linked to the previous one.

What the law
actually says.

Ley 29733 was passed in 2011 and has been fully in force since 2013. Consent must be free, prior, express, unequivocal and informed, and for sensitive data it must also be given in writing.

A new regulation, Supreme Decree 016-2024-JUS, replaced the 2013 rules and took effect in 2025. It adds a data protection officer for many companies, phased in by size, breach notification to the authority within 48 hours, and new rules for international transfers.

Up and running
in four steps.

From the first script tag to the first recorded choice.

  1. The Velo mascot fitting a purple puzzle piece with a code symbol into a clay browser window, on a lavender studio backdrop.

    Add Velo to your site

    Install it with the Google Tag Manager template or paste one script tag. Guides cover WordPress, Shopify, Webflow and other platforms.

  2. The Velo mascot inspecting clay cookies with a magnifying glass beside a stack of sorting trays, on a lavender studio backdrop.

    Scan and sort your cookies

    Velo scans your pages, lists the cookies and scripts it finds and suggests a category for each one. You confirm or change them.

  3. The Velo mascot painting a clay cookie banner whose two buttons are the same size, on a lavender studio backdrop.

    Design the banner

    Pick colours, wording and languages. Reject sits next to accept on the first layer.

  4. The Velo mascot pressing a button on a clay box that prints a receipt with a check seal, on a lavender studio backdrop.

    Publish and check

    Visitors in Peru get opt in defaults, with every consent signal denied until they choose. Each choice lands in your consent log with its receipt id.

Before you
go live.

Velo handles the banner, the regional defaults and the records. These parts stay with you.

  • Your privacy or cookie notice names each purpose and each third party that sets cookies.
  • Tags in Google Tag Manager wait for the matching consent signal before they fire.
  • You tested from the region itself: nothing optional loads before a visitor chooses.
  • Someone on the team reviews new scripts when a scan finds them.
  • You checked whether your personal data banks must be registered with the national authority.

In every plan, from €0

Consent Mode v2 advancedRegional defaults by countryGlobal Privacy Control honouredReceipt for every choiceReject as easy as acceptFloating preferences button
Nine banner languagesCookie and tracker scanChoices by categoryConsent log and dashboardWorks with Google Tag ManagerInstallation help

Questions,
answered.

What teams ask about Ley 29733.

What does Ley 29733 require?

Peru's data protection law requires consent to be free, prior, express, unequivocal and informed before personal data is processed, unless an exception applies. Its regulation was updated by Supreme Decree 016-2024-JUS.

Who enforces it?

The Autoridad Nacional de Protección de Datos Personales, part of Peru's Ministry of Justice and Human Rights.

Why does Velo use opt in for Peru?

Because consent has to come before processing, Velo starts every consent signal denied for visitors in Peru until they choose.

Is this legal advice?

No. This page is general information about Ley 29733 and how Velo behaves.

Website privacy, in one place.

Scan your site →
Pages Free scan Product Agencies Pricing
Company About Velo Blog Help Contact
Account Sign up Log in Get Velo
Regulations GDPR UK GDPR CCPA / CPRA US state laws LGPD Ley 1581 (Colombia) Ley 25.326 (Argentina) Ley 29733 (Peru)
All rights reserved
© 2026 by Amplio Data
Privacy Cookies Terms Refunds GDPR TCF Legal notice