Peru: passenger data record
- Data protection law
- Ley Nº 29733, Ley de Protección de Datos Personales, published 3 July 2011 1. Regulation: Decreto Supremo Nº 016-2024-JUS, published 30 November 2024 2
- Data protection authority
- Autoridad Nacional de Protección de Datos Personales, exercised by the Ministerio de Justicia y Derechos Humanos through its Dirección General de Transparencia, Acceso a la Información Pública y Protección de Datos Personales 2
- Agency that receives API/PNR
- Superintendencia Nacional de Migraciones (PNR) 3
- API/PNR status
- PNR: production stage set to begin after a 90-day extension ordered in July 2019 3. We found no official record of the go-live date 3. API: not confirmed in an official source we opened 3
- Biometric collection at entry
- Yes at e-gates. A 2018 state news agency report said the gates capture a photograph and fingerprint 5
- Date checked
- 22 October 2026
The data protection law and its 2024 regulation
Congress passed Ley Nº 29733 on 21 June 2011 and the President promulgated it on 2 July 2011 1. It was published in El Peruano on 3 July 2011 1. Biometric data that can identify a person by itself counts as sensitive data under article 2 1.
Article 3 excludes public administration databases from the law, but only as far as needed for their legal duties in national defence, public security and criminal investigation 1. Article 15 allows transfers abroad to countries with adequate protection, with exceptions such as treaties and judicial and intelligence cooperation 1. Article 39 sets fines from 0.5 UIT for minor breaches up to 100 UIT for very serious ones, capped at 10% of the offender's prior-year gross income 1.
The original law named the Ministry of Justice, acting through its Dirección Nacional de Justicia, as the authority (article 32) 1. Decreto Supremo Nº 016-2024-JUS was signed on 29 November 2024 and published on 30 November 2024 2. It replaced the 2013 regulation, Decreto Supremo Nº 003-2013-JUS 2. It names the Dirección General de Transparencia, Acceso a la Información Pública y Protección de Datos Personales as the body that exercises the authority 2.
- Public entities must appoint a personal data officer (article 37) 2.
- Serious security incidents must be reported to the authority within 48 hours (article 34) 2.
- Public administration data banks must be registered with the national register, with the exceptions in the law (articles 42 and 43) 2.
- Databases for national defence, public security and criminal investigation stay outside scope where processing is strictly necessary (article V) 2. The regulation does not mention migration or border control 2.
The PNR system at Migraciones
Resolución de Superintendencia Nº 000214-2019-MIGRACIONES extended the PNR implementation schedule by 90 calendar days 3. The original 130-day schedule was approved on 5 February 2019 by Resolución de Superintendencia Nº 000043-2019-MIGRACIONES 3. The extension let airlines finish phase 5, system testing with carriers, after airlines asked for more time 3. Article 1 says the PNR production stage starts when the extension ends 3.
The resolution cites Ministerial Resolution Nº 118-2019-IN, which approved the technical standard on information international air carriers send through PNR 3. It cites article 51 of Decreto Legislativo Nº 1350 on migration control of passengers and crew 3. The resolution lists no data fields, retention period or supplier 3.
E-gates and MigraCheck
A Migraciones resolution from 2020 says the agency has used automated migration control through e-gates since November 2016 4. It says Migraciones has had 18 e-gates at Jorge Chávez airport and 2 units moved to Cusco airport 4. Agencia Andina, the state news agency, reported on 11 June 2018 that 12 new gates were being added to 6 in service 5. It said the gates capture a photograph and fingerprint and take about 30 seconds per passenger 5.
On 13 July 2025 Infobae reported that 12 electronic gates were in use at Jorge Chávez, as reported by Jazmine Angulo 6. It said they serve Peruvian citizens and foreign residents with electronic passports, cross-check data against national and international databases such as Interpol, and cost an investment of S/ 30 million 6. Migraciones said fewer than 50% of eligible passengers used them 6.
MigraCheck is an online pre-registration done within 48 hours before departure 7. Users enter passport data, flight number and destination and answer control questions, then can use the e-gates at Jorge Chávez 7. El Peruano reported on 1 September 2026 that it is open to adult Peruvian citizens 7.
Contracts and official findings
The 2020 Migraciones resolution created a technical committee to assess the state of the e-gates and corrective measures 4. It says Contrato Nº 028-2015-MIGRACIONES-GG of 15 October 2015, for the purchase of the e-gates and related services, had been resolved 4. It refers to breaches (incumplimientos) in carrying out Contrato Nº 037-2017-MIGRACIONES-AF of 28 November 2017 4. The resolution does not name the supplier or state amounts 4.
We found no Contraloría General de la República report on Migraciones passenger data or e-gate systems in the records we opened 4. No supplier for the PNR system or the e-gates is named in the official records we opened 3,4.
Chronology
| Date | Event |
|---|---|
| 3 July 2011 | Ley Nº 29733 published 1 |
| 15 October 2015 | E-gate purchase contract Nº 028-2015-MIGRACIONES-GG signed 4 |
| November 2016 | Automated migration control through e-gates begins 4 |
| 5 February 2019 | Migraciones approves the 130-day PNR schedule 3 |
| July 2019 | PNR schedule extended by 90 days 3 |
| 2020 | Migraciones sets up a committee on e-gate status after contract Nº 028-2015 is resolved 4 |
| 30 November 2024 | Decreto Supremo Nº 016-2024-JUS published 2 |
| 13 July 2025 | Infobae reports fewer than 50% of eligible passengers use e-gates 6 |
Common questions
Does Peru collect PNR data from airlines?
Yes. Migraciones set up a PNR system for international air carriers. Production was set to begin after a 90-day extension ordered in July 2019 3.
Who is Peru's data protection authority?
The Ministerio de Justicia y Derechos Humanos, through its Dirección General de Transparencia, Acceso a la Información Pública y Protección de Datos Personales 2.
Does the data protection law apply to border data?
Public databases are excluded only as far as needed for national defence, public security and criminal investigation 1. The 2024 regulation does not mention migration 2.
Do Peru's e-gates take biometrics?
A 2018 Agencia Andina report said the gates capture a photograph and fingerprint 5.
Rules and fees change. Check the official site linked above before you apply or pay. Spotted an error? Email [email protected] with the official link.
Sources
- Congreso de la República: Ley Nº 29733, Ley de Protección de Datos Personales (3 July 2011)
- Congreso de la República: Decreto Supremo Nº 016-2024-JUS, Reglamento de la Ley Nº 29733 (30 November 2024)
- Superintendencia Nacional de Migraciones: Resolución de Superintendencia Nº 000214-2019-MIGRACIONES (July 2019)
- Superintendencia Nacional de Migraciones: Resolución de Gerencia General 0034-2020-GG on the e-gates committee (2020)
- Agencia Andina: Migraciones instalará 12 nuevas Puertas Electrónicas para rápido control migratorio (11 June 2018)
- Infobae: Sistema de puertas electrónicas de Migraciones lo usa menos del 50% de pasajeros, by Jazmine Angulo (13 July 2025)
- El Peruano: Adelanta tu control migratorio en MigraCheck (1 September 2026)
Related
- Passenger Name Record (PNR) data explained
What PNR data is, the 19 EU data elements, who sends and receives it, the legal basis, retention rules and the 2022 EU Court of Justice ruling.
- Facial recognition gates at airports
How border e-gates match a traveller's face to a passport or a stored gallery, what images are kept, who runs the gates and where they are used.
- Biometric data at borders
Which fingerprints and facial images border agencies collect from travellers, the legal basis, who holds the records and how long they are kept.
- Who oversees passenger data
The bodies that check how governments use API and PNR data: data protection authorities, data protection officers, courts and UN standards.
- Paraguay: passenger data record
Paraguay's 2025 data protection law, the agency it creates, and where the API/PNR project of the Dirección Nacional de Migraciones stands.