We provide personal data protection advice as an integral service for our clients to comply satisfactorily with the regulatory framework.
Our services include, among others, the following:

Auditing and adaptation to the Personal Data Protection Law:

With the frenetic advance of technology there are now mayor ways or mechanisms that have made privacy or the confidentiality of information vulnerable; something that has generated a phenomenon across the world where normative instruments are being issued in order to protect personal information.

With the signing of Law 29733, the Personal Data Protection Law, and its regulations, approved by Supreme Decree 003-2013-JUS, Peru enters a new period regarding the protection of the fundamental right to the protection of personal data, with the incorporation of a set of standards to guarantee they are being met, as well as the protection from the Administration.

Similar to what has taken place in other countries where this type of regulation is now in place, with its enactment, citizens, companies and public entities must become aware of the need to implement measures that guarantee the fundamental right of people to the protection and control of their personal data or information.

Our services in this area encompass the following, among others:

  • Registration of Personal Data Banks and Codes of Conduct with the Personal Data Protection Authority.
  • Legal, organizational and technical adaptation to the Personal Data Protection Law.
  • Compliance with the duty of information and consent in all business processes that require it.
  • Implementation of procedures for the exercise of ARCO rights.
  • Advice for compliance with legal requirements in assignment contracts and processing under contract.
  • Implementation of Information Security Policies.
  • Advising on monitoring and disciplinary procedures for non-compliance with personal data protection regulations.
  • In-classroom training on the scope of the personal data protection regulations.

E-learning for companies:

CMS Grauoffers a virtual training course, directed at employees of private-sector companies, which will allow them to comply with one of the main obligations of companies in the area of privacy, as is to generate awareness in personnel regarding the Personal Data Protection Law, and as a result, contribute to its better compliance.

The goal of this service is to satisfy the need of the business sector to provide training to their workforce regarding the scope of Law N° 29733 – Personal Data Protection Law and its Regulations approved by Supreme Decree N° 003-2013-JUS.

This is a training course that follows the regulatory framework and in a common and easy to understand language, provided by using the most innovative virtual training tools that allow evaluating the learning level of the users.


AI Act: Council and Parliament reach political deal
After lengthy negotiations, a political deal has been reached on the AI Act. This blog provides an overview of the current situation.There has been a gap of over two years between the world's first legal...
How to draft an AI policy
AI has been around for decades, but there’s been a substantial increase in the use (or, at least, talk about the use) of AI within the workplace as a result of recent advances in AI, in particular...
CMS Next
What’s next? In a world of ever-ac­cel­er­at­ing change, staying ahead of the curve and knowing what’s next for your business or sector is essential. At CMS, we see ourselves not only as your legal advisers but also as your business partners. We work together with you to not only resolve current issues but to anticipate future challenges and innovate to meet them. With our latest publication, CMS Next, our experts will regularly offer you insights into and fresh perspectives on a range of issues that businesses have to deal with – from ESG agendas to restructuring after the pandemic or facing the digital transformation. We will also share with you more about the work that we are doing for our clients, helping them innovate, grow and mitigate risk. To be able to provide you with the best support, we immerse ourselves in your world to understand your legal needs and challenges. However, it is equally important that you know who we are and how we can work with you. So, we invite you to meet our experts and catch a glimpse of what is happening inside CMS. Enjoy reading this publication, which we will update regularly with new content. CMS Executive Team
Beyond a personal brand
Beyond a personal brand
CMS Grau ranked by Leaders League as one of the best law firms in Peru...
We are proud to announce that we have once again been ranked by Leaders League - Latin America 2021 for In­tel­lec­tu­al Property, TMC and Data Protection practice areas. A great award and testi­mo­ni­al of...
New GDPR Code of Conduct approved for Cloud Infrastructure Service Providers
The European Data Protection Board (EDPB) and the French Data Protection Authority (CNIL) approved the CISPE Data Protection Code of Conduct of Cloud Infrastructure Service Providers in Europe (CISPE...
Open secrets? Guarding value in the intangible economy
We are delighted to share with you the report commissioned by CMS and written by The Economist Intelligence Unit. It explores the extent to which firms identify intangible assets as trade secrets and...
Some leaks can't be fixed
“Confidential information is like an ice cube... give it to the party who has no refrigerator or will not agree to keep it in one, and by the time of the trial you have just a pool of water.” This...
Data Law Navigator
Data provides a whole range of opportunities but also includes new and unique risks for companies, governments and inpiduals. From sector-specific nuances to local derogations from the EU GDPR, sim­ul­tan­eously...
Data Law Navigator - your guide to local data and cyber security laws across...
100% security does not exist. Now more than ever organisations of all shapes and sizes should pay attention to their data privacy and cyber security. Unprecedented numbers are now working from home, thus...
Data according to private law
Although data represents the cornerstone of the new economy and possesses significant economic value as a crucial component of companies (together with human, material and financial resources), the study...
Even if 5G is a global trend, its deployment is not homogenous in geography
Across countries, 5G will develop at different speeds and with different features. Some technical parameters are common; the same cannot be said for regulation. Therefore, it is critical to identify the...