Peru

Summary

Peru presents low-to-medium risk for public-page crawling. Ley 30096 (Ley de Delitos Informáticos, 2013) art. 2 criminalises acceso ilícito to computer systems but requires that the access violate established security measures — a threshold that public websites generally do not meet. Decreto Legislativo 1700 (January 24 2026) amends Ley 30096 to add a standalone offence for acquisition, possession and trafficking of computer data obtained without consent or by breaching security systems (5–8 years; 8–10 years for aggravated forms); this provision targets data brokers but may reach scrapers who knowingly collect unlawfully sourced data. Data protection is governed by Ley 29733 (2011) enforced by the Autoridad Nacional de Protección de Datos Personales (APDP); Decreto Supremo 016-2024-JUS (published November 30 2024, in force March 30 2025) issued a modernised reglamento adding extraterritorial scope, 48-hour breach notification, a Data Protection Officer obligation, and explicit regulation of biometric data — the most significant reform since 2011. Copyright is governed by Decreto Legislativo 822, which uses a closed list of exceptions with no TDM carve-out. No sui generis database right. No case law specifically addresses web scraping.