A trusted name in data protection, Diez Canseco Abogados fields an impressive team of practitioners with extensive experience in both the public and private spheres. The practice group stands out for its work on numerous proceedings brought by the Peruvian data protection authority (ANPDP), and has assisted clients in industries such as construction, retail and finance. Co-head José Carlos Gonzáles advises on compliance and implementation of data privacy measures, while fellow lead Omar Alvarado’s skillset includes assisting clients with sanctioning proceedings, contractual matters and regulatory compliance. Clients also benefit from the expertise of associates Alexis Vélez Cortez, who is recognised for his involvement in the design and implementation of compliance programmes across a range of state and private entities; and Axel Ruiz, who advises on privacy policies and risk management, in addition to assisting with the defence of clients in administrative proceedings.

Longstanding experience and a team of expert practitioners position Estudio Echecopar as a key player in the field of data privacy. Boasting major names on its client roster, the practice group is routinely engaged for its advice on the implementation of data privacy requirements, as well as data processing training and measures. The team is led by Teresa Tovar, a recognised authority in the telecoms sector who specialises in compliance and data privacy. She is further supported by principal associates Crosbby Buleje Diaz, a specialist in data privacy and tech, who has contributed expert advice to domestic and international clients; and Viviana Chávez, who is noted for her co-leadership in projects relating to data privacy programmes, as well as advising clients from various industries on sanctioning proceedings.

The expertise of the data privacy team at Rodrigo is reflected in the growth of its client base, with the practitioners’ multidisciplinary backgrounds strengthening its offering. The practice group assists with privacy and compliance issues as they pertain to data privacy, cybersecurity and AI; risk mitigation; and administrative proceedings initiated by the Peruvian data protection authority (ANPDP). At the helm is Ramón Vidurrizaga, who leverages his experience as a member of the of the firm’s privacy-and-data-protection executive committee. Associates Francisco Baldeón, who advises on regulatory compliance with a focus on corporate operations, in addition to the design and implementation of privacy measures; and José Govea, a specialist in compliance matters related to privacy and data privacy laws, also bring their expertise to the team.

Boutique firm Baxel Consultores offers counsel on privacy and data protection matters, with a particular focus on the intersection between such issues and both financial and commercial matters. The practice group stands out for its involvement in numerous litigations before the Peruvian data protection authority (ANPDP); it also assists clients with compliance matters through training workshops. At the helm of the team is experienced litigator Christian Chávez Verastegui, a specialist in regulatory and competition law; he is further supported by Mario Drago, a skilled arbitrator whose expertise encompasses antitrust, unfair competition and telecoms, among other areas. Senior associate Alonso Salazar Zimmermann, who is routinely engaged for his knowledge of auditing and sanctioning proceedings, is also noted

Handling a diverse range of matters, Estudio Olaechea’s data protection and information security team assists clients with the implementation of company security measures, as well as ensuring regulatory compliance. The firm also advises clients facing procedures brought by the Peruvian data protection authority (ANPDP) and on ARCO rights matters. Personal-data-protection specialist Carol Quiroz heads the practice group and brings extensive experience in the implementation of regulation related to personal data, in addition to preparing defence strategies in procedures initiated by the ANPDP. Director Andrea Zanusso is noted for her expertise in cybersecurity and data protection matters, while associate Daniela Chavez contributes experience in the design of corporate strategies related to data protection.

Leveraging the multidisciplinary backgrounds of its practitioners, Miranda & Amado’s telecoms and data protection practice group contributes knowledge of administrative, regulatory and competition law, to name a few key areas. The team’s areas of expertise include data privacy, regulatory compliance and cybersecurity. The practice group is co-led by Enrique Felices and Willy Pedreschi, both experts in regulatory and administrative law, who handle matters across data protection compliance and cybersecurity regulations; and Fiorella Zumaeta, who is recognised for advising local and international clients on regulatory matters as they pertain to the sector. Associates Alessia Lercari, who specialises in compliance and digital regulation; and Álvaro Gastañadui, who receives plaudits for his capacity to anticipate and handle emerging privacy risks, are additional key contributors to the team.

Payet, Rey, Cauvi, Pérez Abogados fields a specialised data protection team that advises on regulatory compliance and the handling of biometric data, as well as AI-driven projects. Clients turn to the practice group for advice on relevant regulation in conjunction with an understanding of commercial interests. Carlos Patrón leads the team and specialises in handling sanctioning proceedings relating to ARCO rights and identifying companies’ risks of non-compliance. Julia Loret De Mola is a specialist in data protection and compliance; she focuses primarily on the implementation of data protection systems. Clients further benefit from the insights of senior associates Marianna Vallvé, who assists with risk assessment and data protection programmes; and Ana Lucía Figueroa, a certified data protection expert. Giancarlo Baella departed the firm in July 2024.

Benites, Vargas & Ugaz is frequently engaged by clients for defence in proceedings initiated by the Peruvian data protection authority (ANPDP) as well as counsel on relevant privacy and data protection regulation. The practice group is also noted for its involvement in the development of new data protection legislation. Team head Carlo Fabricio Sánchez Concha brings experience spanning the public and private sectors, assisting clients with mitigating data protection risks and ensuring compliance. Acting for a roster of clients across multiple industries including retail, banking and mining, associate Alexandra Espinoza is a trusted advisor in matters of IP and data protection and leads the advisory team that handles these issues.

Experienced at handling data protection matters, Cuatrecasas offers advice on personal data processing measures for companies in addition to assisting with regulatory compliance. Its services include assessing data protection processes and identifying possible risks; advising on data protection matters across commercial transactions; and training relevant company departments on data protection matters. Iván Blume oversees the team, having joined the firm from Rodrigo in July 2023; he specialises in data protection as well as labour and employment law, and brings experience as an advisor to national and international companies. At the associate level, Fernando Salhuana and María Pía Agramonte assist clients with reducing legal risks associated with non-compliance.

Forming part of the firm's competition, consumer protection and intellectual property department, Hernández & Cía fields a three-strong data protection team. Key areas of focus include regulatory compliance; assistance in cases of cyberattacks; and the use of sensitive personal information in security processes. The team is led by August 2024-hire Giancarlo Baella (previously at Payet, Rey, Cauvi, Pérez Abogados) who specialises in personal data regulation in addition to IP and consumer protection law; he is a certified data protection expert and is regularly called upon for his expertise in cybersecurity and the handling of sensitive data. Also certified in data protection, senior associate Carlos Holguín has broad experience in advising domestic and international corporations on both cybersecurity and data protection.

Drawing on expertise in consumer protection, advertising and privacy law, the data protection practice group at Muñiz, Olaya, Meléndez, Castro, Ono & Herrera Abogados routinely advises clients on regulatory compliance and data protection systems, including matters involving the cross-border flow of personal data. Senior partner Jorge Muñiz leads the team in conjunction with Alex Sosa, who oversees the implementation of data compliance programmes. Associate Camila Mallqui is commended for her management of the data protection team, and has advised an array of domestic and international clients.

DLA Piper Perú is well-positioned to advise on a range of data protection matters, spanning regulatory compliance; regulatory proceedings and sanctions; criminal data protection breaches; and risk mitigation. Young partner Daniel Flores leads the team, contributing expertise in personal-data-protection regulation compliance and advising companies on related systems and practices. At associate level, Ana Lucía Torres Calderón and José Miguel Sáenz provide support on matters of data-protection regulatory compliance in addition to assisting with the implementation of related processes.

DS Casahierro Abogados' data protection team provides comprehensive support on regulatory and compliance matters. The practice group’s capabilities span data protection training to companies across the industrial, commercial and educational sectors; audits to identify potential non-compliance; and advising on inspection and sanctioning procedures. Competition and IP expert Javier Duany co-leads the team with Jessica Ortiz, a specialist in personal data protection who has broad experience advising local and international clients on regulatory compliance, supervisory and sanctioning procedures, and training matters. Clients also benefit from the contributions of associates Jesus Maldonado, a certified data protection expert who assists with matters of compliance, auditing and training, among others; and Miki Okuda, who 'brings an exceptional level of thoroughness and precision to her work'.

KPMG Tax & Legal (Peru) offer risk consultancy services related to data protection matters under their information technology advisory services practice group. The team’s experience includes the development of personal data protection clauses; ensuring data protection regulatory compliance; and general auditing of relevant systems to mitigate data protection risks. Tax-and-legal expert Maria Julia Sáenz oversees the team, and new partner, labour specialist Carlos Cardenas (previously at Sagio Consulting), presides over compliance and risk management matters. Thiago Caetano is also active in the firm’s data protection matters, conducting audits and risk analyses. At the associate level, Thalia Martínez assists with security assessments related to data protection regulation.

Santiváñez Abogados provides steady support on an array of regulatory compliance matters, covering due diligence, the implementation of personal data protection systems and training. The practice group also advises clients on administrative proceedings initiated by the Peruvian data protection authority (ANPDP). ‘Spectacular’ senior associate Jessica Hondermann, a certified expert in data privacy, co-leads the team with fellow senior Percy Samaniego, who brings experience in competition law and regulation.