Data Protection Authority fines Caja Ica 53 UIT on first instance for using personal data without consent
Peru's National Personal Data Protection Authority fined Caja de Ahorro y Crédito de Ica 53 UIT on first instance, after a complaint from a person who received a letter with their personal data offering them a loan. It is a first-instance decision.
This is a first-instance sanction. The Caja had 15 business days from notification to file for reconsideration or appeal, and we have not been able to confirm whether it did. If it challenged the decision, it can still change.
| Entity fined | Caja de Ahorro y Crédito de Ica S.A. |
|---|---|
| Authority | ANPD |
| Resolution | Resolución Directoral N.° 813-2026-JUS/DGTAIPD-DPDP |
| Fine | 53 UIT — S/ 272,950 |
| Resolution date | 10 Jul 2026 |
The Personal Data Protection Directorate of Peru’s National Personal Data Protection Authority (ANPD), part of the Ministry of Justice and Human Rights, fined Caja de Ahorro y Crédito de Ica S.A. a total of 53 UIT on first instance. Resolución Directoral N.° 813-2026-JUS/DGTAIPD-DPDP (case file 140-2025) is dated 10 July 2026 and was published on gob.pe.
The case began with a complaint from a person who received a letter containing their personal data, in which the Caja called them a “preferred customer” and offered them a loan. During the investigation, the authority asked the Caja whether the complainant was or had been a customer, what data it held about them and how it obtained it, and whether it had their consent to use the data for marketing.
The resolution imposes two fines:
- 9 UIT for a serious infringement: processing personal data without the owner’s free, express, unequivocal, prior and informed consent (item b of article 132.2 of the Regulation of the Personal Data Protection Law);
- 44 UIT for a very serious infringement: collecting personal data through fraudulent, unfair or unlawful means (item b of article 132.3 of the same Regulation).
The resolution states that the 2024 UIT value applies to these fines; that value was S/5,150. At that value, 53 UIT come to S/272,950 (53 × 5,150).
According to the resolution, the Caja could file for reconsideration or appeal within 15 business days of being notified; we have not been able to confirm whether it did. If it did not appeal and paid within the 25-business-day deadline, it could get a 40% reduction for early payment.
If a company uses your data without your consent, you can file a complaint with the ANPD, as the complainant did in this case. See also what happens if a company does not pay a data protection fine.