There is no comprehensive Privacy or Data Protection Law, which imposes mandatory requirements or obligations related to the collection and processing of personal data. However, according to Supreme Decrees No. 1391 and 1793, any use of personal data (including collecting and processing personal data), regarless of purpose, requires the data subject's express and written consent.