See other practice areas


As demand for privacy and data protection grows, clients seek our advice to help them understand and navigate data protection risks, to ensure that their businesses are exploiting commercially personal data without conflicting with the rigorous rules set by applicable regulations. Data transfers, cross-border flow of information, e-commerce and marketplaces, cybersecurity, data breach response, administrative investigations and litigation, advice on treatment of sensitive data, design of corporate policies, protocols and new products, and privacy and data protection compliance programs are some of the services provided by our established and experienced team. 


  • We are supporting Grupo Ripley’s digital transformation and data monetization initiatives given the growing importance of its online marketplace. In this regard, we have assisted Tiendas por Departamento Ripley, one of the largest retailers and department stores in Latin America, in improving the process of obtaining data subjects’ consents through massive digital means (i.e., website), implementing protocols and agreements governing electronic transmission of personal data, as well as implementing changes to the databases already registered. Moreover, we have advised the company in four strategic supervision procedures carried out by the data protection authority.
  • We regularly advise Citibank del Perú on complex matters regarding the implementation of data protection policies that involve other regulatory angles, such as finance and labor. One of the highly sensitive matters relating to the protection of information pertaining to the client’s employees included the assessment required to implement a global due diligence aimed at gathering metrics on employees as they work remotely. This matter was particularly relevant, given that our advice allows Citibank del Perú to measure its workforce productivity while complying with data protection regulations.
  • We are conducting a privacy impact assessment on Prosegur’s operations, for the purpose of identifying any key breaches of data protection laws. This assessment has been particularly complex because there are several laws at stake in addition to data protection regulations, in matters such as anti-money laundering and anti-terrorist financing, as well as video surveillance.
  • We are assisting Adidas Perú in connection with a preventative supervision procedure on the official websites of its Adidas and Reebok brands carried out by the data protection authority. In this regard, our Firm has provided legal assistance with a focus on providing evidence of responsive steps taken to correct any failures found with the aim of preventing this supervision procedure from developing into a sanctioning proceeding.
  • We have assisted DiDi, one the world’s largest sharing economy mobility platforms, in reviewing the company’s privacy notices and Terms & Conditions included in the agreements executed with riders, drivers and other parties. This assistance is crucial for the company because it enables massive and detailed personal data gathering, which, in turn, enables the company to monetize such information.
  • We advised Experian Colombia on the acquisition of Sentinel, a competitor in the credit risk reporting industry. Due to the data-driven nature of the business at stake, the core of the due diligence assessment was identifying any breaches of data protection regulations. This matter was particularly significant for the client given the high commercial value that lawful handling of personal data represents for the sector.

Related news

Team members

The website uses cookies to collect certain information that helps optimize your visit under the following conditions. If you ACCEPT and continue on this site, you acknowledge that these conditions will apply to your browsing. I ACCEPT