Negative credit reports in Peru (Infocorp and other CEPIRs): how fast they update and when an employer can see yours

The underlying mistake: assuming a negative report is an indefinite, ruleless punishment

When someone pays a debt and still shows up as a debtor on Infocorp, it’s easy to assume there’s no deadline, that “it just works that way,” or that you simply have to wait. In reality, Peruvian law sets concrete deadlines, in business days, for every step of the chain from your payment to your report being updated. It also sets clear limits on who can review that report and for what.

Private risk information bureaus — CEPIRs, of which Infocorp is the best known, alongside others like Equifax or Sentinel — operate in Peru under a framework the country set up in 2001 (Ley 27489). This page does not cite specific articles of that base law because a clean official text of its articles could not be verified in this review; instead, it is built entirely on two recent laws that were directly verified and that, as it happens, resolve the most practical and current questions.

What your credit report can contain

Ley 31944 legally redefined what a “credit report” is, and set a clear limit on its content:

“Reporte de crédito.- Toda comunicación escrita o contenida en algún medio proporcionada por una CEPIR con información de riesgos referida a una persona natural o jurídica, identificada. Dicha comunicación no puede contener juicios de valor, dictámenes u opiniones que sean de naturaleza subjetiva referidos a la persona natural o persona jurídica.”

In other words: your report can only reflect objective risk information — amounts, dates, whether you paid or not — never an opinion or subjective judgment about you as a person.

The deadlines when you pay a debt or win a dispute — and why you have to request them

This is the part that generates the most questions: legally, how long can it take for a payment to be reflected? The short answer is that no deadline runs on its own from the date of payment: the exact text of article 13 of Ley 32327 conditions both deadlines on a request.

Article 13.1 says that once you regularize or pay a debt, the lender, at the debtor’s request and within 7 business days counted from the date of that request, issues you proof of the regularization. Article 13.2 is a separate mechanism: while the information in the Central de Riesgos is updated through the ordinary channel, at the client’s request, the SBS has another 7 business days counted from that request to inform the financial-system entities and the private risk-information bureaus (CEPIRs) of the regularization directly. It is not that the lender automatically notifies the SBS within the same 7 days, nor that the SBS has a separate deadline that runs on its own: these are two distinct requests, each with its own 7-business-day count starting when you make it.

The same applies if you won a dispute over a charge you don’t recognize: article 14 establishes that, once the investigation is resolved in your favor, the entity has the same 7-business-day deadline to inform you and the SBS. From there the same scheme in article 13.2 applies: if you request that the SBS notify the CEPIR, another 7-business-day deadline runs from that request.

The final step is set by article 2, which amended article 42.3 of Ley 29571 (the Consumer Protection Code): once the credit bureau — Infocorp, for instance — receives the relevant information, it has only 2 business days to update your report.

Altogether, if you make both requests and every deadline is used to its maximum, the whole process — from when you request it to your report being updated — can take up to roughly two business weeks; but that clock starts when you trigger it with a request, not automatically on the day you pay. These deadlines aren’t theoretical or brand new: Ley 32327 was published on May 10, 2025, and its articles entered into force 90 calendar days later, meaning roughly since August 2025.

What an employer can and cannot do with your credit report

The First Final Complementary Provision of Ley 31944 sets two very concrete limits on any state institution or private company that wants to review a job candidate’s credit report:

“Las instituciones del Estado o empresas privadas o públicas convocantes a puestos de trabajo que deseen revisar el reporte de crédito de sus candidatos deberán obtener, bajo apercibimiento, el permiso por escrito del postulante en el que se exprese de manera indubitable su conformidad. En cualquier caso, el reporte de crédito del candidato no podrá ser causal de su exclusión o descalificación en cualquier fase de la convocatoria, por constituirse en un acto discriminatorio.”

First: they need your written, unambiguous permission before even checking it. Second, and more important: even if they check it with your permission, they cannot use it to disqualify you at any stage of the hiring process — the law itself calls doing so an act of discrimination.

This rule has an explicit exception, stated in the same provision:

“Se excluyen de los alcances de la presente disposición complementaria final la Superintendencia de Banca, Seguros y Administradoras Privadas de Fondos de Pensiones y la Superintendencia del Mercado de Valores, así como las entidades reguladas o supervisadas por estas superintendencias.”

In other words, the SBS, the SMV, and the entities they regulate or supervise (such as banks, finance companies, insurers and AFPs) may consider a credit report as part of their hiring processes, given the nature of their business.

Foreigners

These rules apply to anyone with a credit history on file with a Peruvian CEPIR, Peruvian or foreign — for example, if you have a bank account, a credit card, or a loan with a financial institution operating in Peru. The same update deadlines and the same restrictions on using the report for hiring apply regardless of nationality.