At Perez & Co., we support domestic and international companies in complying with privacy and data protection laws. Our approach combines legal compliance, an understanding of digital business models and commercial insight to help organizations use information responsibly, mitigate risk and strengthen the trust of customers, employees and business partners.

Our Services:

Data Protection Compliance and Governance Programs

• Compliance assessments and audits.
• Inventories and mapping of databases and processing activities.
• Identification of controllers, processors and other participants.
• Drafting and updating of data protection policies.
• Preparation of privacy notices and consent forms.
• Development of manuals, procedures and risk matrices.
• Implementation of mechanisms to respond to data subject inquiries and complaints.
• Advice on obligations related to the National Database Registry (RNBD).
• Development of training and awareness programs.
• Ongoing support for privacy officers and responsible teams.

Agreements and Data Flows

• Data processing and transfer agreements.
• Data protection provisions in agreements with customers, employees and suppliers.
• Assessment of international data transfers.
• Agreements with technology providers, cloud service providers and digital platforms.
• Review of arrangements for sharing, acquiring and monetizing databases.
• Privacy audits in investment, acquisition and corporate reorganization processes.
• Assessment of vendors and data processors.

Privacy in Products and Projects

We apply privacy-by-design principles when supporting new commercial and technology initiatives:

• Applications, platforms and e-commerce models.
• Advertising campaigns and marketing activities.
• Loyalty programs and consumer profiling.
• Processing of sensitive and biometric data, and personal data of minors.
• Video surveillance systems and recognition technologies.
• Artificial intelligence tools and automated decision-making.
• Analytics, research and innovation projects.
• Data protection impact assessments.

Security Incidents and Crisis Management

• Development of legal incident response protocols.
• Assessment of reporting and notification obligations.
• Legal coordination with technology, security and communications teams.
• Response to inquiries and claims from data subjects.
• Development of mitigation strategies and documentation of incidents.
• Representation before authorities and affected third parties.
• Post-incident reviews and updates to compliance measures.

Investigations and Disputes

• Response to requests and inspections by the Superintendence of Industry and Commerce (SIC).
• Representation in administrative investigations and enforcement proceedings.
• Responses to orders and instructions issued by the authorities.
• Appeals and judicial review of administrative decisions.
• Litigation involving the processing of personal data.
• Defense in constitutional protection proceedings, public interest actions and class actions.

What Sets Us Apart:

• Risk-Based Approach: We prioritize the activities that may create the greatest legal, operational or reputational exposure.
• Practical Implementation: We prepare documents and procedures that can be effectively integrated into operations.
• Technology and Business Insight: We understand how data is collected and used within digital and commercial models.
• Prevention and Response: We help build robust programs and respond swiftly to incidents or investigations.
• Integrated Advice: We coordinate privacy matters with contracts, consumer protection, intellectual property, artificial intelligence and litigation.

At Perez & Co., we understand that data protection is not merely a regulatory obligation, but a fundamental component of corporate reputation and trust. We are committed to helping our clients use information responsibly while maintaining proportionate and effective controls.

Do you need to implement, update or defend your organization’s data protection program? Contact us to assess your level of compliance.