Consequences of Non-Compliance

Key Concept 6 — Consequences of Non-Compliance

Fines are only one of the risks — trust is often the bigger loss.

Most enforcement cases start with something avoidable: a security gap, a missing legal basis, an unanswered request from a customer or a complaint from an employee.

Typical consequences

Fines by the data protection authority, often based on turnover or on a fixed unit
Orders from authorities: stop a processing activity, delete data, change a system — which can halt a business process overnight
Claims for damages by the affected people, in some countries also through class actions or consumer associations
Loss of trust of customers, employees and business partners, and negative press
Business impact: lost tenders, failed due diligence and stricter requirements from customers
Personal liability of managers and employees under some laws

Sanctions in your jurisdiction

Peru

Supervisory authority: National Authority for Personal Data Protection (ANPDP), Ministry of Justice and Human Rights

Fines graded by severity: minor 0.5–5 UIT, serious 5–50 UIT, very serious 50–100 UIT
Corrective measures ordered by the ANPDP
Loss of trust of customers and employees