Peru DPL: every control, and what you already have

37 controls 112 frameworks share controls with it Peru verified against its source document

Every control below is one this framework asks for. The right hand column counts how many other frameworks in our corpus carry the same control, which is the difference between doing this work once and doing it again for the next standard.

There is no implementation kit for this framework yet. The control list and the overlap above are free and complete.

What you already have

Frameworks whose controls overlap this one, most first. If you run any of them, the count is roughly what you have already evidenced.

If you run	Shared controls
Bahrain PDPL	6	measure it →
Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (UAE PDPL)	6	measure it →
FTC GLBA Safeguards Rule (16 CFR Part 314)	6	measure it →
ISO/IEC 27400:2022	6	measure it →
Privacy Act 1988 (Australia)	6	measure it →
Privacy Act 2020	6	measure it →
South Korea PIPA	6	measure it →
Switzerland New Federal Act on Data Protection (nFADP/nDSG, 2023)	6	measure it →
Turkey KVKK	6	measure it →
Vietnam PDPD	6	measure it →
APPI	5	measure it →
Barbados Data Protection Act 2019	5	measure it →

Every control

Code	Control	Also in
`PERU-1`	Scope, Lawful Basis, Purpose Limitation, Quality	0
`PERU-2`	Consent, Privacy Notice, Sensitive Data	42
`PERU-3`	Data Subject Rights (ARCO), Habeas Data, Automated Decisions	38
`PERU-4`	Children's Data, Privacy Impact, Sensitive Categories	17
`PERU-5`	Security of Personal Data and Processor Agreements	50
`PERU-6`	Cross-Border Transfer and Personal Data Bank Registration	0
`PERU-7`	DPO, Records, Retention, Marketing, Training	87
`PERU-8`	Breach Notification, ANPD Cooperation, Sanctions, Compliance	57
`1`	Object of the Law	0
`13`	Scope of processing: consent, sensitive data, revocation, children, criminal data, private communications	0
`14`	Cases where consent is not required	0
`15`	Cross-border flow of personal data	0
`16`	Security of the processing of personal data	0
`17`	Confidentiality of personal data	0
`18`	Right of information (privacy notice)	0
`19`	Right of access	0
`20`	Right of updating, inclusion, rectification and erasure	0
`21`	Right to prevent supply	0
`22`	Right of opposition	0
`23`	Right to objective processing	0
`24-27`	Rights procedure: protection, compensation, fees and limitations	0
`28`	Obligations of the owner of the data bank and of the processor	0
`29`	Creation, modification or cancellation of personal data banks and their registration	0
`3`	Scope of application	0
`30`	Provision of processing services by third parties	0
`31`	Codes of conduct	0
`32-36`	Title VI: the National Authority and the National Registry	0
`37-40`	Title VII: infringements and administrative sanctions	0
`4-12`	Guiding principles: legality, consent, purpose, proportionality, quality, security, recourse, adequate level of protection	0
`DCF`	Final and amending provisions and amendment history	0
`R.34`	Reglamento article 34: notification of a security incident to the Authority within 48 hours	0
`R.35`	Reglamento article 35: documentation of security incidents	0
`R.37-39`	Reglamento articles 37 to 39: the Personal Data Officer	0
`R.40`	Reglamento article 40: data protection impact assessment (optional)	0
`R.47`	Reglamento article 47: the security document	0
`R.76`	Reglamento article 76: portability of personal data	0
`REG`	Reglamento, Decreto Supremo 016-2024-JUS	0

Tell me when Peru DPL files something new

One email when a public company newly discloses something this framework governs, naming the company and what our corpus says it puts in scope. Nothing else, and one click to stop.

What this page is

A control-level reference for Peru DPL, drawn from our framework corpus. Control codes and titles are references to the standard, not reproductions of it. The overlap counts and the auditor artefacts are our own work and are the part you will not find elsewhere.

Measure this against what you already run · All frameworks · Today's edition