Verified against the official source

Can a hotel, bank or phone company ask for a copy of your DNI?

Short answer

They can ask to see it and record its details; no rule we reviewed makes banks, phone companies, notaries or hotels keep a copy of a customer's DNI (except a tax rule for non-domiciled guests), and the data authority has fined 11 companies, at least 13 times, for photographing it when showing was enough, though no blanket ban exists.

VerificationVerified against the official sourceSee the sources ↓

  • 45sources cited
  • 45read at the official source
  • 8official institutions

Reniec · SMV · Peruvian State portal (gob.pe) · El Peruano · Osiptel · Ministry of Economy · SBS · SUNAT

Checked 14 Oct 2026Next review 14 Jan 2027

What we read and what we did not

This page rests on official texts, with some limits.

Read moreRead less

That the 2022 hotel change has not taken effect is our conclusion, not something a rule says: we did not find the Sunat resolution it depends on in Sunat's official indices for 2022 to 2026, checked up to 7 October 2026, and its guidance page still asks for copies. We saw only a partial text of D.S. 342-2017-EF. We read Res. 132-2025-CD/OSIPTEL in fragments, and its publication date is reported, not read. We do not know the outcome of an appeal in most of the sanctioned cases. Whether a DNI photo is sensitive data is disputed within the authority itself: a 2021 advisory opinion said a copy of the DNI photo is not, though it set apart a biometric analysis of the image, and a 2026 sanction treated photos of the DNI together with a selfie of the holder as sensitive. We found no sanction for a paper photocopy, and none against buildings, hotels, gyms, employers or clinics.

Foreign residentsPeruvians

What the law says

No Peruvian law bans private businesses across the board from copying or photographing your DNI. Article 30 of Ley 26497 forbids two things: demanding a document other than the DNI to identify you, and seizing or keeping it. It says nothing about copies. The express ban on demanding a DNI copy exists only for public bodies, in Decreto Legislativo 1246; it is explained in Can a public office in Peru demand a photocopy of your DNI?.

What limits private businesses is Ley 29733, the Personal Data Protection Act. Its article 7 says: «Todo tratamiento de datos personales debe ser adecuado, relevante y no excesivo a la finalidad para la que estos hubiesen sido recopilados» (all processing must be adequate, relevant and not excessive for its purpose). Its article 8 requires data to be «necesarios, pertinentes y adecuados» for that purpose. Copying or photographing your DNI is processing your data. A DNI carries more data than is usually needed to check who you are.

Article 14 of the same law lists cases where the company does not need your consent: for example, when the data is needed for a contract with you, or when a law requires it. Those exceptions remove the need for consent, not the proportionality limit. That last point is our reading of the law, consistent with the sanctions below; it is not written in those words.

The infraction applied today is in article 132.1 of the regulation, D.S. 016-2024-JUS. It is minor (leve): «Realizar tratamiento de datos personales que no sean necesarios, pertinentes ni adecuados con relación a las finalidades determinadas, explícitas y lícitas para las que requieren ser obtenidos». The article 39 scale runs from 0.5 to 5 UIT for minor infractions.

What the data protection authority has decided

Peru’s National Data Protection Authority, part of the Ministry of Justice (Minjusdh), sanctioned 11 companies at least 13 times for photographing customers’ DNIs between 2022 and 2026: one phone company was sanctioned three times, and for one order both the shop and its courier were sanctioned. Most of the cases are deliveries of purchases, and in each one showing the DNI was enough. We do not name the companies; we cite the resolution.

RDDateWhat happenedInfractionFine (UIT)Appeal
811-2026-JUS/DGTAIPD-DPDP08/07/2026A digital wallet asked over WhatsApp, to close an account, for photos of both sides of the DNI and a selfie holding itSerious (sensitive data, previous regulation)20.25No appeal found
3322-2024-JUS/DGTAIPD-DPDP26/09/2024A bank, through a provider, photographed campaign participants’ DNIsMinor1.30No appeal found
2290-2024-JUS/DGTAIPD-DPDP08/07/2024A phone company’s store photographed both sides of the DNI during a refundMinor2.11No appeal found
1396-2024-JUS/DGTAIPD-DPDP24/04/2024A phone company photographed both sides of the DNI when delivering a phone bought onlineMinor1.63No appeal found
4080-2023-JUS/DGTAIPD-DPDP13/12/2023A courier photographed the DNI when delivering a hardware and home retailer’s online orderMinor1.30No appeal found
4079-2023-JUS/DGTAIPD-DPDP12/12/2023The retailer behind that order, sanctioned for its courier’s photoMinor1.63No appeal found
2470-2023-JUS/DGTAIPD-DPDP18/08/2023An online marketplace’s contract required a photo of the customer with the DNI, the package and the houseMinor3.58Upheld (RD 050-2025-JUS/DGTAIPD)
1956-2023-JUS/DGTAIPD-DPDP28/06/2023A department store photographed the DNI at its online-order deliveriesMinor3.9 (plus a separate security fine)No appeal found
3317-2022-JUS/DGTAIPD-DPDP14/09/2022The same phone company, sanctioned for its courier’s photo of both sides of the DNI at a home deliveryMinor4.23 (words and figures differ in the resolution)No appeal found
2950-2022-JUS/DGTAIPD-DPDP04/08/2022An electronics retailer’s delivery driver photographed the DNIMinor3.09No appeal found
2047-2022-JUS/DGTAIPD-DPDP23/05/2022A retailer photographed the DNI when delivering an online purchaseMinor2.28No appeal found
1628-2022-JUS/DGTAIPD-DPDP12/04/2022A department store, sanctioned for its courier’s photo of the DNI at deliveryMinor3.08Fine reduced to 2.11 UIT (RD 69-2022-JUS/DGTAIPD)
169-2022-JUS/DGTAIPD-DPDP15/02/2022A bank, through a courier, photographed the DNIs of prize recipientsMinor4.06Upheld (RD 067-2024-JUS/DGTAIPD)

In RD 2950-2022 and 4079-2023 the operative part also uses the word «grave», but the resolution’s own analysis concludes the infraction is minor, and the fine is within the minor range.

Fines range from 1.30 to 20.25 UIT. Three cases reached a second instance: two were upheld and one fine was reduced.

The most serious case is RD 811-2026. To close an account, a digital wallet asked for photos of both sides of the DNI and a photo of the holder holding the document. The authority said (paragraph 73) that «la exigencia de remitir fotografías del anverso y reverso del DNI, junto con una imagen del titular sosteniendo el documento, no resulta proporcional … excede lo razonablemente necesario para cumplir la finalidad de autenticar la identidad del usuario» (the demand was not proportional and went beyond what was reasonably needed to authenticate the user). It classed it as serious, because it treated those images as sensitive data, and the fine was 20.25 UIT.

Some lines from the other resolutions:

  • RD 3322-2024: the DNI «contiene datos que no son necesarios, pertinentes ni adecuados» for the campaign, and it was enough to identify people «mediante la exhibición del Documento Nacional de Identidad (no fotografiarlo)». On that charge it applied the minor infraction of the previous regulation; the same conduct is now article 132.1.
  • RD 2047-2022: that data «son desproporcionales a la finalidad de entrega de un producto». It ordered the company to stop capturing photos of the DNI and to prove it had deleted the complainant’s photo.
  • RD 169-2022 (paragraph 67): «la toma de fotografías de los DNI de los receptores resulta un procedimiento invasivo y que extrae más datos personales de los necesarios».
  • RD 2470-2023 (paragraph 47): «tomar una foto al DNI no se justifica como una finalidad de identificar al titular … sino que constituye un tratamiento innecesario».
  • RD 2950-2022 (paragraph 47): «el solo hecho de capturar y almacenar la imagen del DNI … constituye un tratamiento de los datos personales».

One nuance: in RD 3317-2022 (paragraph 65), the authority reasoned that a photo taken at a distance, showing only the number and the names, might have been enough. That is that resolution’s reasoning, not a general rule, but it shows that what counts is what data the photo captures.

Three cases did not end in a sanction for the DNI photo: in RD 2239-2022 no photo was taken, and in RD 2515-2024 and 1550-2024 the charge failed for other reasons. Even so, in RD 2515-2024 the authority urged the company to «evite tomar imágenes de los DNI…, limitándose a su sola revisión» (avoid photographing DNIs and just look at them).

Before those sanctions, a Minjusdh note from August 2020 already said that «para la compra y venta de productos solo deben solicitarse los datos estrictamente necesarios para efectuar la entrega del bien» (only the data strictly needed to deliver the goods should be requested).

The authority’s guide for building owners’ boards (RD 023-2025-JUS/DGTAIPD) says: «El Documento Nacional de Identidad tiene como finalidad identificar plenamente a una persona. Su uso debe ser proporcional a dicha finalidad». And it adds: «También es desproporcionado cuando se captura en una toma fotográfica el DNI de cualquier visitante» (photographing any visitor’s DNI is also disproportionate). This is guidance; we found no sanction against a building for it.

It is not an absolute ban. It is a case-by-case test: it depends on what the copy is for.

What each sector’s rule asks for

SectorWhat the rule asks forA copy of your DNI?Rule
BanksThe type and number of the document, and that you present itOnly for the bank’s directors, managers and staff; not for customersRes. SBS 2660-2015, arts. 30.1, 31.4 and 35.2.b
Phone companiesBiometric verification, plus one of these: showing the document, a code sent to your phone or email or generated in an app, or a piece of information only you knowThe rule says nothingRes. 132-2025-CD/OSIPTEL, arts. 37.2, 38.2.1 and 49
NotariesDemanding the DNI and verifying your identity by biometric fingerprint comparisonThe rule says nothingD.L. 1049, art. 55, as worded by D.L. 1232
Hotels, Peruvian guests and resident foreignersRecording your details in the guest registerThe rule says nothingD.S. 001-2015-MINCETUR, as amended by D.S. 005-2021-MINCETUR
Hotels, non-domiciled foreigners (IGV)To skip IGV, the hotel must show Sunat a copy of the passport or DNI and the TAM (2017 text)Yes, in our reading: the 2017 rule requires it, and we found no Sunat resolution that would bring the 2022 change into effect.D.S. 122-2001-EF, art. 7, as worded by D.S. 342-2017-EF; D.S. 087-2022-EF; Sunat guidance
Shops, gyms, buildings, deliveriesNo sector ruleThe data authority sanctioned photographing it at deliveries; for buildings, its guide says photographing a visitor’s DNI is disproportionate (guidance, no sanction found)Ley 29733, art. 7; D.S. 016-2024-JUS, art. 132.1; RD 023-2025-JUS/DGTAIPD

A rule not asking for a copy does not mean it forbids one. It means the company cannot tell you «the law makes me». If it asks anyway, the question is whether that copy is needed for the purpose.

On hotels and foreigners: for the hotel not to charge IGV to a non-domiciled guest, the tax regulation, as worded by D.S. 342-2017-EF, requires it to show Sunat a «copia fotostática o fotocopia digitalizada» of the passport or DNI and the migration card (TAM). So, in that case, the hotel can ask you for that copy. D.S. 087-2022-EF replaces that with presenting the document and the pages of the guest register, but the decree itself says those changes «rigen a partir de la fecha de entrada en vigencia de la resolución de superintendencia que emita la SUNAT» (apply from when a Sunat resolution takes effect). We did not find that resolution in Sunat’s official indices for 2022 to 2026, checked up to 7 October 2026, and Sunat’s guidance page still says «El establecimiento de hospedaje pedirá copia del respectivo pasaporte». Our conclusion, from that absence, is that the 2022 change has not taken effect. This rule is only for non-domiciled guests, not for Peruvians or resident foreigners.

What to do

  1. Show the DNI and offer to read out the details. A Minjusdh note from May 2025 puts it this way: «Cuando te soliciten tu DNI, debes mostrarlo para que corroboren tu identidad. No permitas que le tomen fotografías» (show it so they can confirm your identity; do not let them photograph it).
  2. If they insist, ask what it is for. The purpose is what decides whether the copy is excessive.
  3. If you must hand over a copy, mark it. The same note recommends: «Usa marcas de agua o tachaduras si necesitas enviar una copia del DNI» (use watermarks or strike-throughs).
  4. If they already took it, ask them to delete it. This is a deletion (cancelación) request. The maximum time to answer is 10 business days (D.S. 016-2024-JUS, art. 69.3), and they may extend it once by another 10 if they justify it (art. 71.1). How to file it is in ARCO rights.
  5. Complain. Record it in the business’s complaints book, and if they do not delete the copy, go to the National Data Protection Authority.

If they also want to keep the physical DNI, that is a different act, and it is forbidden: Can a building, gym or hotel in Peru keep your ID card?.

What is still unclear

  • We found no sanction for a paper photocopy. All the resolutions are about photographs.
  • We found no sanctions against buildings, hotels, gyms, employers or clinics for photographing or copying the DNI.
  • We do not know the outcome of an appeal in most of the cases.
  • Whether a DNI photo is sensitive data is disputed within the authority: a 2021 advisory opinion (OC 024-2021-JUS/DGTAIPD) said a copy of the DNI photo is not, though it set apart a biometric analysis of the image, and RD 811-2026 treated photos of the DNI together with a selfie of the holder as sensitive.
  • That the 2022 hotel change does not apply is our conclusion: we did not find the Sunat resolution it depends on.

How to file

  1. Show the DNI and offer to read out the details«Se lo muestro y puede anotar mi nombre y número. Una foto no hace falta para verificar quién soy.» This is what Minjusdh recommends: show it so they can confirm your identity, without letting them photograph it.
  2. If they insist, ask what it is forAsk why they need the copy and which rule requires it. If the answer is «company policy», write it down. The purpose is what decides whether the copy is excessive.
  3. If you must hand over a copy, mark itMinjusdh recommends watermarks or strike-throughs if you need to send a copy of the DNI. One way to do it, which is our suggestion, is to write across it what the copy is for and the date.
  4. If they already took it, ask them to delete itSend the company a request to cancel your data. They have 10 business days to answer (art. 69.3; the regulation defines «días» as business days). They may extend it once, by another 10, if they justify it (art. 71.1). Keep your stamped copy.
  5. Complain: complaints book and the data authorityRecord it in the business's *libro de reclamaciones*. If they do not delete the copy or do not answer, file a claim with the National Data Protection Authority at Minjusdh.

Possible changes ahead

None of this is law in force yet. What this page explains is what applies today; this is what could change it.

Published, not yet in force

Decreto Supremo N.º 087-2022-EF

Where it stands
Published 06/05/2022; its changes to arts. 7 and 8 of D.S. 122-2001-EF depend on a Sunat resolution we did not find in its indices up to 07/10/2026
What it would change
The hotel would no longer have to show Sunat a copy of the non-domiciled guest's passport and TAM; presenting the document and the guest-register pages would be enough.
How it would take effect
The decree says its changes «rigen a partir de la fecha de entrada en vigencia de la resolución de superintendencia que emita la SUNAT» (they apply from when a Sunat resolution takes effect).
When
No date set

Status checked on 14 October 2026 · See the official source

What people fail to ask in time

The photo of your DNI is already in the company's system. Do you know how to get it deleted?

Find out before it matters →

What most people believe — and what the law says

The belief

It is illegal for any business to copy or photograph my DNI.

The law

No law bans it across the board. Article 30 of Ley 26497 forbids demanding a different document and keeping the DNI, not copying it. The limit comes from the Personal Data Protection Act: what is processed must not be excessive for the purpose. That is decided case by case.

The belief

DL 1246 only binds the State, so a private business can copy my DNI as it likes.

The law

DL 1246 does not apply to private businesses, but that does not give them a free hand. The data protection authority sanctioned 11 companies at least 13 times for photographing the DNI when showing it was enough, among them a bank (RD 3322-2024) and a digital wallet (RD 811-2026).

The belief

My bank is legally required to keep a copy of my DNI.

The law

The anti-money-laundering rule we reviewed asks for the type and number of the document and for you to present it. It asks for a copy of the document only for the bank's directors, managers and staff, not for customers. Not requiring a copy does not mean it is forbidden either.

The belief

Once they have taken the photo, there is nothing I can do.

The law

You can ask them to delete it. It is a deletion (cancelación) request, and the regulation gives a maximum of 10 business days to answer. In RD 2047-2022 the authority ordered the company to prove it had deleted the photo of the DNI.

Frequently asked questions

What if they already copied or photographed it?

Ask in writing for the copy to be deleted. This is a request to cancel your personal data. Article 69.3 of D.S. 016-2024-JUS sets a maximum of 10 business days for the answer. If they do not answer or refuse, you can file a claim with the National Data Protection Authority. Failing to act on the request, or obstructing it, is a serious infraction (art. 133.1). Answering late is a minor one (art. 132.7). If they refuse on a legal ground, that is not an infraction; you can challenge it before the authority.

Does consent fix it? If I signed, can they photograph it?

We found no statement from the authority that settles this. Our reading of Ley 29733, which is not written in these words: consent and proportionality are separate rules, and signing does not make necessary a piece of data that is not. It is consistent with the sanctions, but none of them says it this way. In one case (RD 2047-2022, paragraph 48), the authority noted that the company never said in its emails that it would photograph the DNI before delivery, and concluded that it «no puede presumir que la denunciante habría aceptado» (could not presume the customer had agreed).

Is a paper photocopy the same as a phone photo?

The sanctions we found are for photographs. We found none for a paper photocopy. The proportionality principle in Ley 29733 covers «todo tratamiento de datos personales», so in our reading it reaches a photocopy too, but we know of no case that confirms it.

Can a notary take a copy of my DNI?

Article 55 of D.L. 1049, as worded by D.L. 1232, says the notary will demand the DNI and verify your identity through Reniec's biometric fingerprint comparison, and will record those checks in the deed. It says nothing about copying the DNI.

Can a phone company ask for a copy of my DNI to give me a line?

Osiptel's service conditions, in force since 27 June 2026, ask for biometric verification, plus one of these: showing the document, a code sent to your phone or email or generated in an app, or a piece of information only you know. The subscriber register keeps the document number and type and the biometric verification report, not an image of the DNI. The rule says nothing about DNI copies. The data authority has sanctioned phone companies for photographing the DNI at deliveries and during a refund (RD 3317-2022, 1396-2024 and 2290-2024).

I am a foreigner and the hotel wants a copy of my passport. Can it?

Yes, in our reading, if you are not domiciled in Peru and the hotel does not charge you IGV. The tax rule in force for that, in its 2017 wording, requires the hotel to show Sunat a copy of your passport and your migration card (TAM). A 2022 decree changes it to simply presenting the document, but that change applies only once Sunat issues a resolution, and we did not find one in its official indices up to 7 October 2026; Sunat's guidance page still says «El establecimiento de hospedaje pedirá copia del respectivo pasaporte» (the hotel will ask for a copy of the passport). That the change does not apply is our conclusion from that absence. This applies only to non-domiciled guests, not to Peruvians or resident foreigners.

Why does the regulation itself ask for a copy of the DNI to exercise your data rights?

Because the regulation says so: article 63.1.1 of D.S. 016-2024-JUS says these rights are exercised «presentando copia del Documento Nacional de Identidad o documento equivalente». That shows a DNI copy is not forbidden in itself. What matters is whether it is needed for the purpose.

What the fine is

ConductSeverityRangeAuthority
Processing DNI data not needed for the purpose, such as photographing it when showing it is enough — minor infraction
Ley 29733, art. 39; D.S. 016-2024-JUS, art. 132.1
In RD 3322-2024-JUS/DGTAIPD-DPDP, on the photo charge, the fine was 1.30 UIT.
leve0.5 – 5 UIT
S/ 2,750.00 – S/ 27,500.00
$795 – $7,955
National Data Protection Authority
Requiring photos of both sides of the DNI and a selfie with it when that is not needed — serious infraction
Ley 29733, art. 39; D.S. 016-2024-JUS, art. 133.6
In RD 811-2026-JUS/DGTAIPD-DPDP the fine was 20.25 UIT; the resolution applied the previous regulation and treated the photos as sensitive data. That it now matches article 133.6 is our reading. It is disputed: in OC 024-2021-JUS/DGTAIPD the same authority said «La copia de la fotografía del Documento Nacional de Identidad ni las cuentas bancarias constituyen datos sensibles» (a copy of the DNI photo is not sensitive data), though it set apart a biometric analysis of the image.
grave5 – 50 UIT
S/ 27,500.00 – S/ 275,000.00
$7,955 – $79,549
National Data Protection Authority
Failing to act on your request to exercise your data rights, such as having the DNI photo deleted — serious infraction
Ley 29733, art. 39; D.S. 016-2024-JUS, art. 133.1
Answering late is a minor infraction (art. 132.7). No fine may exceed 10% of the offender's gross income for the prior year.
grave5 – 50 UIT
S/ 27,500.00 – S/ 275,000.00
$7,955 – $79,549
National Data Protection Authority

Fines are set in UIT. When the UIT moves, every fine moves with it. UIT 2026 = S/ 5,500 (Decreto Supremo N.º 301-2025-EF). Reference conversion only. The debt is owed in soles.FX rate as of2026-10-12: US$ 1 = S/ 3.457.

The exact law

Ley N.º 26497Article 30read

Organic Law of Reniec — the DNI is the only document that may be demanded for identification; it may not be retained

«Para efectos identificatorios ninguna persona, autoridad o funcionario podrá exigir, bajo modalidad alguna, la presentación de documento distinto al Documento Nacional de Identidad (DNI). Tampoco podrá requisarse o retenerse el documento bajo responsabilidad.»
✓ Article read directly in the official sourcePublished 12 July 1995Open official text →

Ley N.º 29733Article 7read

Personal Data Protection Act — proportionality principle

«Todo tratamiento de datos personales debe ser adecuado, relevante y no excesivo a la finalidad para la que estos hubiesen sido recopilados.»
✓ Article read directly in the official sourcePublished 2 July 2011Open official text →

↳Article 8read

Personal Data Protection Act — quality principle

«necesarios, pertinentes y adecuados respecto de la finalidad para la que fueron recopilados»
✓ Article read directly in the official sourcePublished 2 July 2011Open official text →

↳Article 14, items 5, 10 and 13read

Personal Data Protection Act — cases where consent is not needed (contract, legal mandate, powers set by law)

✓ Article read directly in the official sourcePublished 2 July 2011Open official text →

↳Article 39read

Personal Data Protection Act — penalty scale

✓ Article read directly in the official sourcePublished 2 July 2011Open official text →

Decreto Supremo N.º 016-2024-JUSArticle 132, item 132.1read

Regulation of Ley 29733 — minor infraction: processing data not needed for the purpose

«Realizar tratamiento de datos personales que no sean necesarios, pertinentes ni adecuados con relación a las finalidades determinadas, explícitas y lícitas para las que requieren ser obtenidos.»
✓ Article read directly in the official sourcePublished 30 November 2024Open official text →

↳Article 133, item 133.1read

Regulation of Ley 29733 — serious infraction: failing to act on the data subject's rights

«No atender, impedir u obstaculizar el ejercicio material de los derechos del titular»
✓ Article read directly in the official sourcePublished 30 November 2024Open official text →

↳Article 69, item 69.3read

Regulation of Ley 29733 — deadline to answer a deletion (cancelación) request

«el plazo máximo de respuesta [...] es de diez (10) días»
✓ Article read directly in the official sourcePublished 30 November 2024Open official text →

↳Article 63, item 63.1.1read

Regulation of Ley 29733 — how the data subject proves identity when exercising rights

«presentando copia del Documento Nacional de Identidad o documento equivalente»
✓ Article read directly in the official sourcePublished 30 November 2024Open official text →

Resolución Directoral N.º 3322-2024-JUS/DGTAIPD-DPDPCharge, reasoning and sanctionread

Data protection authority — 1.30 UIT fine (minor infraction) on a bank on the charge of photographing, through a provider, campaign participants' DNIs

«mediante la exhibición del Documento Nacional de Identidad (no fotografiarlo)»
✓ Article read directly in the official sourcePublished 26 September 2024Open official text →

Resolución Directoral N.º 2047-2022-JUS/DGTAIPD-DPDPParagraph 49 and corrective measuresread

Data protection authority — minor infraction, 2.28 UIT: a retailer photographed the DNI when delivering an online order

«no se debe capturar la foto del DNI del titular del producto»
✓ Article read directly in the official sourcePublished 23 May 2022Open official text →

Resolución Directoral N.º 169-2022-JUS/DGTAIPD-DPDPParagraph 67 and sanctionread

Data protection authority — minor infraction, 4.06 UIT: a bank, through a courier, photographed the DNIs of prize recipients

«la toma de fotografías de los DNI de los receptores resulta un procedimiento invasivo y que extrae más datos personales de los necesarios»
✓ Article read directly in the official sourcePublished 15 February 2022Open official text →

Resolución Directoral N.º 023-2025-JUS/DGTAIPDGuide for building owners' boards and administrators, section 11read

Data protection authority — proportional use of the DNI in buildings (guidance, no sanction)

«El Documento Nacional de Identidad tiene como finalidad identificar plenamente a una persona. Su uso debe ser proporcional a dicha finalidad. [...] También es desproporcionado cuando se captura en una toma fotográfica el DNI de cualquier visitante.»
✓ Article read directly in the official sourcePublished 28 March 2025Open official text →

Press note of the Ministry of Justice and Human RightsRecommendations to protect your personal information (8 May 2025)guidance

Minjusdh — beware of identity theft

«Usa marcas de agua o tachaduras si necesitas enviar una copia del DNI.»
Authority guidanceThe authority says it; it is not the text of a normPublished 8 May 2025Open official text →

Decreto Legislativo N.º 1232Text of article 55 of D.L. No. 1049, Notaries Act, as amendedread

Notaries Act — the notary demands the DNI and verifies identity by biometric fingerprint comparison

«el notario exigirá el documento nacional de identidad y deberá verificar la identidad de los otorgantes o intervinientes utilizando la comparación biométrica de las huellas dactilares»
✓ Article read directly in the official sourcePublished 26 September 2015Open official text →

Decreto Supremo N.º 005-2021-MINCETURAmends articles 4.1.u) and 26.1 of the Hospedaje Establishments Regulation (S.D. No. 001-2015-MINCETUR)read

Hospedaje Establishments Regulation — definition and mandatory nature of the Guest Registry

«Registro de Huéspedes: Registro llevado por el establecimiento de hospedaje, en fichas, libros o medios digitales, en el que obligatoriamente se inscribe el nombre completo del huésped, fecha de nacimiento, sexo, nacionalidad, lugar de residencia, documento de identidad, motivo de viaje, fecha de ingreso, fecha de salida, el número de la habitación asignada y la tarifa correspondiente incluyendo los impuestos que se cobren. [...] Es requisito indispensable para ocupar las habitaciones, la inscripción previa de los huéspedes en el registro de huéspedes.»
✓ Article read directly in the official sourcePublished 18 April 2021Open official text →

Decreto Legislativo N.º 1246Article 5, numeral 5.1, letter a)read

Administrative simplification measures — ban on demanding a DNI photocopy (public bodies only)

«Las entidades de la Administración Pública están prohibidas de exigir a los administrados o usuarios, en el marco de un procedimiento o trámite administrativo, los siguientes documentos: a) Copia del Documento Nacional de Identidad»
✓ Article read directly in the official sourcePublished 10 November 2016Open official text →

Resolución de Consejo Directivo N.º 000132-2025-CD/OSIPTELArticles 37.2, 38.2.1 and 49read

Conditions of Use of Public Telecommunications Services — identity verification and subscriber register (approved at the 17-12-2025 board session; read in fragments; publication date not read)

«La empresa operadora debe exigir: (i) la exhibición del documento legal de la identidad»
✓ Article read directly in the official sourcePublished 17 December 2025Open official text →

Decreto Supremo N.º 087-2022-EFArticle 3 (new article 7 of D.S. 122-2001-EF) and Sole Final Complementary Provisionread

IGV Regulation — hotels and non-domiciled guests: presenting the document; effect depends on a Sunat resolution

«El establecimiento de hospedaje debe requerir al sujeto no domiciliado la presentación de la TAM, así como el pasaporte, salvoconducto o documento nacional de identidad que de conformidad con los tratados internacionales celebrados por el Perú sean válidos para ingresar al país. [...] que rigen a partir de la fecha de entrada en vigencia de la resolución de superintendencia que emita la SUNAT a que se refiere el artículo 8 del Decreto Supremo N° 122-2001-EF.»
✓ Article read directly in the official sourcePublished 6 May 2022Open official text →

Decreto Supremo N.º 342-2017-EFArticle 6 (earlier text of article 7 of D.S. 122-2001-EF)read

IGV Regulation — earlier rule requiring a copy of the passport and TAM for non-domiciled guests (partial text)

«deberá presentar y/o exhibir a la SUNAT copia fotostática o fotocopia digitalizada»
✓ Article read directly in the official sourcePublished 22 November 2017Open official text →

Resolución SBS N.º 2660-2015Articles 30.1(b), 31.4 and 35.2(b)read

Money-laundering risk management regulation (official consolidated text) — customer data; a copy of the ID is required only for directors, managers and staff; amendments 4705-2017, 5060-2018, 3329-2019 and 1743-2020 add no customer copy

«Tipo y número del documento de identidad. [...] Para su correspondiente verificación, es exigible la presentación del documento de identidad en el caso de personas naturales. [...] Copia del documento de identidad.»
✓ Article read directly in the official sourcePublished 18 May 2015Open official text →

Press note of the Ministry of Justice and Human RightsPhotographing a DNI as a requirement to deliver a product (20 August 2020)guidance

Minjusdh — risks of photographing the DNI for online-order deliveries

«para la compra y venta de productos solo deben solicitarse los datos estrictamente necesarios para efectuar la entrega del bien.»
Authority guidanceThe authority says it; it is not the text of a normPublished 20 August 2020Open official text →

Decreto Supremo N.º 016-2024-JUSPreliminary Title, article III, item 8read

Regulation of Ley 29733 — definition: days are business days

«Días : Días hábiles.»
✓ Article read directly in the official sourcePublished 30 November 2024Open official text →

↳Article 71, item 71.1read

Regulation of Ley 29733 — extension of the response deadline

«pueden ser ampliados una sola vez, y por un plazo igual, como máximo, siempre y cuando las circunstancias lo justifiquen»
✓ Article read directly in the official sourcePublished 30 November 2024Open official text →

↳Article 132, item 132.7read

Regulation of Ley 29733 — minor infraction: answering late

«Atender fuera de plazo el ejercicio material de los derechos del titular de datos personales, cuando legalmente proceda.»
✓ Article read directly in the official sourcePublished 30 November 2024Open official text →

↳Article 133, item 133.6read

Regulation of Ley 29733 — serious infraction: processing sensitive data not needed for the purpose

«Realizar tratamiento de datos personales sensibles que no sean necesarios, pertinentes ni adecuados con relación a las finalidades determinadas, explícitas y lícitas para las que requieren ser obtenidos.»
✓ Article read directly in the official sourcePublished 30 November 2024Open official text →

Resolución de Consejo Directivo N.º 000035-2026-CD/OSIPTELProvision on the entry into force of Res. 132-2025-CD/OSIPTELread

Osiptel — date the new Conditions of Use take effect

«La presente norma entra en vigencia el 27 de junio de 2026»
✓ Article read directly in the official sourcePublished 28 March 2026Open official text →

Sunat tax guidanceRegime obligations — lodging establishmentsguidance

Sunat — current guidance on passport copies for non-domiciled guests (page consulted 14/10/2026; no publication date)

«El establecimiento de hospedaje pedirá copia del respectivo pasaporte»
Authority guidanceThe authority says it; it is not the text of a normPublished 14 October 2026Open official text →

Resolución Directoral N.º 811-2026-JUS/DGTAIPD-DPDPParagraph 73 and sanctionread

Data protection authority — serious infraction, 20.25 UIT: a digital wallet required photos of both sides of the DNI and a selfie holding it to close an account

«la exigencia de remitir fotografías del anverso y reverso del DNI, junto con una imagen del titular sosteniendo el documento, no resulta proporcional»
✓ Article read directly in the official sourcePublished 8 July 2026Open official text →

Resolución Directoral N.º 2470-2023-JUS/DGTAIPD-DPDPParagraph 47 and sanctionread

Data protection authority — minor infraction, 3.58 UIT: an online marketplace required a photo of the customer with the DNI

«tomar una foto al DNI no se justifica como una finalidad de identificar al titular»
✓ Article read directly in the official sourcePublished 18 August 2023Open official text →

Resolución Directoral N.º 050-2025-JUS/DGTAIPDOperative partread

Data protection authority, appeal — upholds RD 2470-2023-JUS/DGTAIPD-DPDP

✓ Article read directly in the official sourcePublished 23 June 2025Open official text →

Resolución Directoral N.º 1396-2024-JUS/DGTAIPD-DPDPParagraph 46 and sanctionread

Data protection authority — minor infraction, 1.63 UIT: a phone company photographed both sides of the DNI when delivering a phone bought online

«sin la necesidad de tomar una fotografía»
✓ Article read directly in the official sourcePublished 24 April 2024Open official text →

Resolución Directoral N.º 2290-2024-JUS/DGTAIPD-DPDPSanctionread

Data protection authority — minor infraction, 2.11 UIT: a phone company's store photographed both sides of the DNI during a refund

✓ Article read directly in the official sourcePublished 8 July 2024Open official text →

Resolución Directoral N.º 3317-2022-JUS/DGTAIPD-DPDPParagraph 65 and sanctionread

Data protection authority — minor infraction, 4.23 UIT: a phone company, for its courier's photo of both sides of the DNI at a delivery

✓ Article read directly in the official sourcePublished 14 September 2022Open official text →

Resolución Directoral N.º 4080-2023-JUS/DGTAIPD-DPDPSanctionread

Data protection authority — minor infraction, 1.30 UIT: a courier photographed the DNI when delivering a hardware and home retailer's online order

✓ Article read directly in the official sourcePublished 13 December 2023Open official text →

Resolución Directoral N.º 4079-2023-JUS/DGTAIPD-DPDPSanctionread

Data protection authority — minor infraction, 1.63 UIT: a hardware and home retailer, liable for its courier's photo

✓ Article read directly in the official sourcePublished 12 December 2023Open official text →

Resolución Directoral N.º 1956-2023-JUS/DGTAIPD-DPDPSanction and corrective measureread

Data protection authority — minor infraction, 3.9 UIT: a department store photographed the DNI at its deliveries

«Acreditar la destrucción de las fotografías de DNIs»
✓ Article read directly in the official sourcePublished 28 June 2023Open official text →

Resolución Directoral N.º 1628-2022-JUS/DGTAIPD-DPDPSanctionread

Data protection authority — minor infraction, 3.08 UIT: a department store, for its courier's photo of the DNI at delivery

✓ Article read directly in the official sourcePublished 12 April 2022Open official text →

Resolución Directoral N.º 69-2022-JUS/DGTAIPDOperative partread

Data protection authority, appeal — reduces the RD 1628-2022-JUS/DGTAIPD-DPDP fine to 2.11 UIT

✓ Article read directly in the official sourcePublished 30 September 2022Open official text →

Resolución Directoral N.º 2950-2022-JUS/DGTAIPD-DPDPParagraph 47 and sanctionread

Data protection authority — minor infraction, 3.09 UIT: an electronics retailer's delivery driver photographed the DNI

«el solo hecho de capturar y almacenar la imagen del DNI»
✓ Article read directly in the official sourcePublished 4 August 2022Open official text →

Resolución Directoral N.º 067-2024-JUS/DGTAIPDOperative partread

Data protection authority, appeal — upholds RD 169-2022-JUS/DGTAIPD-DPDP

«INFUNDADO el recurso de apelación»
✓ Article read directly in the official sourcePublished 30 July 2024Open official text →

Resolución Directoral N.º 2239-2022-JUS/DGTAIPD-DPDPOperative partread

Data protection authority — charge dismissed: the courier asked for the photo but did not take it

✓ Article read directly in the official sourcePublished 13 June 2022Open official text →

Resolución Directoral N.º 2515-2024-JUS/DGTAIPD-DPDPOperative partread

Data protection authority — charge dismissed on procedural grounds, with a call not to photograph the DNI

«limitándose a su sola revisión»
✓ Article read directly in the official sourcePublished 30 July 2024Open official text →

Resolución Directoral N.º 1550-2024-JUS/DGTAIPD-DPDPParagraph 87read

Data protection authority — DNI-photo charge dismissed in a medicine delivery

«acciones adicionales como la recopilación de las imágenes de los DNI ya no son útiles para tal finalidad»
✓ Article read directly in the official sourcePublished 10 May 2024Open official text →

Opinión Consultiva N.º 024-2021-JUS/DGTAIPDParagraph 25 and conclusion 5read

Data protection authority — advisory opinion on security measures, sensitive data and cross-border data flows

«La copia de la fotografía del Documento Nacional de Identidad ni las cuentas bancarias constituyen datos sensibles.»
✓ Article read directly in the official sourcePublished 2 July 2021Open official text →

Also searched as: can a bank take a photo of my dni peru · is it legal for a hotel to photocopy my passport peru · phone company asked for a copy of my id peru · can a shop photograph my id peru · delivery driver asked for a photo of my dni · how to make a company delete a photo of my id peru · fine for photographing an id card peru

Related

What this page already lets you do

  • Name the rule that protects you
  • Copy the exact article and send it
  • Follow the steps, in order
  • Know how far the fine goes