Peru data privacy lawyer
Cross-border data flows between Peru and the United States increasingly require counsel who understands both Peru’s data protection framework and the US legal environment. Law Offices of SRIS, P.C., founded in 1997, is a US law firm with an international clientele. The firm collaborates with foreign-jurisdiction Of Counsel attorneys, including Martín Mayandía, Of Counsel for Peru matters (Mr. Mayandía is admitted to practice law in Peru. He is not admitted to practice law in the United States.), to assist clients with Peruvian data privacy compliance, cross-border data transfers, and representation before Peru’s Autoridad Nacional de Protección de Datos Personales (ANPDP). Mr. Sris and his cross-border team bring extensive legal experience to matters where a US-law dimension and a Peruvian-law dimension intersect. For a confidential consultation, call Law Offices of SRIS, P.C. at (888) 437-7747.
What Peruvian data privacy law covers
Peru’s personal data protection law, enacted as Ley N° 29733, establishes a comprehensive framework for collecting, processing, storing, and transferring personal data of individuals in Peru. The law applies to any entity — public or private, domestic or foreign — that handles personal data of Peruvian residents, whether or not the data processor is physically present in Peru. The Autoridad Nacional de Protección de Datos Personales (ANPDP) is the principal regulator, with authority to investigate violations, impose penalties, and issue binding regulations.
Peruvian law defines “personal data” broadly, covering any information that identifies or makes identifiable a natural person. It imposes obligations regarding consent, purpose limitation, security measures, data subject access rights, and cross-border transfers. International data transfers to countries that do not provide adequate protection are generally prohibited unless specific safeguards — such as standard contractual clauses or binding corporate rules — are in place. Peru’s legal framework also creates a right of habeas data, enabling individuals to seek judicial protection of their personal data. A Peruvian data privacy lawyer can advise on compliance with these requirements and represent clients in proceedings before the ANPDP.
How Mr. Sris and his Of Counsel network handle Peruvian data privacy matters
When a matter involves both US law and Peruvian data protection law, Law Offices of SRIS, P.C. uses a collaborative cross-border model. US-admitted attorneys at the firm, led by Mr. Sris (admitted in Virginia, Maryland, the District of Columbia, New Jersey, and New York), manage the US-law aspects — such as US-based data processing agreements, US discovery obligations, or compliance with US federal or state privacy statutes. For the Peruvian-law side, the firm draws on the experience of Martín Mayandía, Of Counsel for Peru matters (Mr. Mayandía is admitted to practice law in Peru. He is not admitted to practice law in the United States.). This division ensures that each substantive legal issue is addressed by a practitioner licensed in the relevant jurisdiction.
The typical engagement: if a US company collects or processes personal data from individuals in Peru, Mr. Sris and his team advise on the US-side contracting and regulatory interface, while Mr. Mayandía provides counsel on Peruvian consent requirements, ANPDP notification duties, and any necessary registrations or filings. The attorneys coordinate closely but maintain strict jurisdictional separation, avoiding the unauthorized practice of law in either country. This model permits the firm to offer integrated guidance without compromising ethical obligations.
About Mr. Sris and the sriscounsel Of Counsel network
Mr. Sris, Owner and Founder of Law Offices of SRIS, P.C., is a former prosecutor admitted in Virginia, Maryland, the District of Columbia, New Jersey, and New York. He has practiced since the firm was founded in 1997, handling a wide range of cross-border matters for international clients. Mr. Sris testified before the Virginia House Courts of Justice Committee in support of journal 2019 HB 635 (chief patron Del. David Bulova), the bill that became the 2019 revision to Va. Code § 20-107.3(g). He manages the firm’s overall practice.
The sriscounsel Of Counsel network augments the firm’s reach in foreign jurisdictions. Martín Mayandía, Of Counsel for Peru matters (Mr. Mayandía is admitted to practice law in Peru. He is not admitted to practice law in the United States.), brings extensive experience in Peruvian data protection law and its intersection with international data regimes. He collaborates with US-admitted attorneys at the firm to provide clients with a seamless yet jurisdictionally proper cross-border practice.
Frequently Asked Questions
Do I need a Peruvian-licensed lawyer for data privacy compliance in Peru?
Yes — Peruvian law requires that legal representation before the ANPDP and other Peruvian authorities be performed by an attorney admitted to practice in Peru. A US-licensed attorney cannot represent a client in a Peruvian regulatory proceeding. However, a US attorney can advise on US-side compliance and coordinate strategy, while the Peruvian-licensed lawyer handles filings, investigations, and advocacy before Peruvian agencies. The firm’s engagement model pairs US and Peruvian counsel accordingly.
What is the role of the Autoridad Nacional de Protección de Datos Personales (ANPDP)?
The ANPDP is Peru’s independent data protection authority, responsible for enforcing Ley N° 29733 and its regulations. It investigates complaints, conducts inspections, imposes penalties, and issues guidelines on compliance. The ANPDP also maintains the National Registry for the Protection of Personal Data, where database operators must register certain data processing activities. Having Peruvian counsel familiar with ANPDP procedures is important for navigating these obligations.
Our company is based in the US but collects personal data from Peruvian residents. What are our obligations under Peruvian law?
If your company processes personal data of individuals located in Peru, you are generally subject to the extraterritorial reach of Ley N° 29733. You must ensure that the processing has a valid legal basis — typically consent — and that security measures meet Peruvian standards. Cross-border transfers to the US must comply with Peruvian requirements, which may demand adequacy findings or appropriate safeguards. The firm’s US attorneys can review your US-based data practices, while Of Counsel in Peru can advise on any registration or notification obligations with the ANPDP.
What is habeas data in Peru?
Habeas data is a constitutional remedy in Peru that allows individuals to access, update, or delete their personal data held by public or private entities. It is a procedural mechanism to enforce data protection rights. If a data subject’s request to correct or delete information is ignored, he or she may file a habeas data action in court. Peruvian counsel can represent data subjects or companies responding to such actions, ensuring compliance with procedural and substantive requirements.
How do we engage a cross-border data privacy team?
The firm offers an integrated approach: a US-licensed attorney acts as lead on the US-law portion, while Martín Mayandía, Of Counsel, handles the Peruvian-law aspects. To discuss your specific needs, contact Law Offices of SRIS, P.C. at (888) 437-7747. A confidential consultation will identify the jurisdictional division of labor and the engagement terms for each attorney. There is no obligation to retain both counsel, but coordinating through the firm simplifies cross-border compliance.
Attorney responsible for this content: Mr. Sris (admitted in Virginia, Maryland, the District of Columbia, New Jersey, and New York).
Attorney responsible for this advertising in the State of New Jersey: Atchuthan Sriskandarajah, Esq.
Law Offices of SRIS, P.C. is a US law firm. Foreign Of Counsel attorneys, including Martín Mayandía, are not admitted to practice law in any US state. Mr. Mayandía is admitted to practice law in Peru.
Attorney advertising. Prior results do not guarantee a similar outcome. The information on this page is general in nature and should not be construed as legal advice for any particular matter. Use of this site does not create an attorney-client relationship.
Law Offices of SRIS, P.C. attorneys are admitted to practice law in Virginia, Maryland, the District of Columbia, New Jersey, and New York. The firm collaborates with foreign-jurisdiction Of Counsel attorneys on matters involving foreign law. No attorney in the firm or its Of Counsel network practices law in a jurisdiction where they are not admitted.