Panama
SubstantialLaw No. 81 of 2019 on Personal Data Protection
Authority: National Authority for Transparency and Access to Information (ANTAI) | Enforcement: partial | Enacted: March 2021
Overview
Panama enacted its data protection law in 2019, with full implementation by March 2021. ANTAI oversees compliance. The law covers consent, data subject rights, and cross-border transfers. Enforcement capacity is developing.
14-Topic Coverage
Data Protection Authority
Fully AddressedANTAI oversees data protection compliance alongside transparency functions.
Consent Requirements
Fully AddressedConsent required as primary basis. Must be free, specific, informed, and unambiguous.
Data Subject Rights
Fully AddressedRights to access, rectification, cancellation, and opposition.
Cross-Border Transfer
Fully AddressedTransfers to countries with adequate protection or with appropriate safeguards.
Breach Notification
Fully AddressedMust notify ANTAI and affected data subjects.
DPO Requirements
Partially AddressedMust designate responsible person for data protection.
Children's Data
Partially AddressedGeneral provisions apply. Enhanced protections for minors.
Penalties & Enforcement
Fully AddressedFines from USD 1,000 to USD 100,000. Database suspension for serious violations.
Sector-Specific Rules
Partially AddressedSBP financial data rules, health data regulations.
Cookie/Tracking
Partially AddressedGeneral consent requirements apply.
AI & Automated Decisions
Not AddressedNo specific provisions.
Data Localisation
Not AddressedNo general data localisation requirement.
Significant Data Fiduciary
Not AddressedNo equivalent concept.
Government Data
Fully AddressedLaw applies to both public and private sector.
Coverage Summary
Quick Navigation
Need Compliance Help?
Our data privacy team can help you navigate Panama's regulations.
Book a Consultation