Ley 29733, sensitive personal data and minors

Ley No. 29733, arts. 2.5, 13.3, 13.6, 14.6 (sensitive data and children)

A citation is an address, not a summary. The first part names the law; what follows narrows it to the exact section, article or paragraph.

What follows is LexLint's own research summary of this law, not legal advice.

In force since 3 July 2011.

A sensitive categories rule binding public and private bodies.

As of 19 September 2026.

What it requires

For sensitive data (biometric data that by itself identifies a person, racial or ethnic origin, income, political, religious, philosophical or moral opinions, union affiliation, or health or sex-life information), obtain the titleholder's consent in writing, in addition to the general consent requirements, and do not process it without that written consent unless a law authorizes processing without it on important public-interest grounds.
Process health data without consent only where necessary, in a risk situation, for the titleholder's medical or surgical prevention, diagnosis, or treatment at a health establishment or by a health-sciences professional observing professional secrecy, for a public-interest or public-health reason the Ministry of Health has qualified as such, or for an epidemiological or similar study using an adequate dissociation procedure.
Let a child or adolescent exercise their data-protection rights through their legal representative, and apply any special measure the regulation sets for processing a minor's personal data.

What it reaches

Obligation class

Consent, Biometric, Age verification

What this law does

Drafted with AI from the cited sources under the direction of UnGovr staff. UnGovr holds editorial responsibility for this page.

Article 2.5 defines sensitive data as personal data made up of biometric data that by itself can identify the titleholder, data on racial and ethnic origin, income, political, religious, philosophical, or moral opinions or convictions, union affiliation, and information related to health or sex life.

Article 13.6 requires written consent for processing sensitive data, in addition to the general consent requirements article 13.5 states, and permits processing without it only where a law authorizes it and the processing serves important public-interest grounds.

Article 14.6 lets health data be processed without consent where necessary, in a risk situation, for the titleholder's medical or surgical prevention, diagnosis, or treatment, carried out at a health establishment or by a health-sciences professional observing professional secrecy, or where a public-interest or public-health reason the Ministry of Health has qualified as such applies, or for an epidemiological or similar study using an adequate dissociation procedure.

Article 13.3 defers special measures for processing children's and adolescents' personal data to the regulation, and in the meantime requires children and adolescents to exercise the rights the Law grants through their legal representatives, subject to exceptions the regulation may set having regard to the child's or adolescent's best interest.

When LexLint raises it

processes_biometrics
processes_voice
handles_health_records
serves_minors
crawls_web
trains_models

Read the law

consolidated text of Ley 29733
Ley de Protección de Datos Personales, as republished by LP Derecho (Pasión por el Derecho), a Peruvian legal publisher

Every line above is drawn from the primary source linked here, read on the date shown. This is a research summary, not legal advice.

Back to the example · Lint your app