Paraguay
ModerateLaw No. 6534/2020 on the Protection of Personal Credit Data + Habeas Data (Constitution Art. 135)
Authority: Ministry of Industry and Commerce | Enforcement: partial | Enacted: October 2020
Overview
Paraguay does not have a comprehensive data protection law. Protections come from the constitutional habeas data provision and Law 6534/2020 covering personal credit data. A broader data protection bill has been under consideration.
14-Topic Coverage
Data Protection Authority
Partially AddressedMinistry of Industry and Commerce oversees credit data. No comprehensive DP authority.
Consent Requirements
Partially AddressedConsent required for credit data. Constitutional habeas data rights exist.
Data Subject Rights
Fully AddressedHabeas data rights in constitution: access, correction, and deletion.
Cross-Border Transfer
Partially AddressedNo comprehensive framework. Sector-specific restrictions.
Breach Notification
Not AddressedNo mandatory breach notification requirement.
DPO Requirements
Not AddressedNo DPO requirement.
Children's Data
Partially AddressedGeneral child protection laws apply. No specific data protection provisions.
Penalties & Enforcement
Partially AddressedPenalties under Law 6534 for credit data violations.
Sector-Specific Rules
Partially AddressedBCP financial data rules, Habeas Data constitutional provision.
Cookie/Tracking
Not AddressedNo specific cookie regulation.
AI & Automated Decisions
Not AddressedNo specific provisions.
Data Localisation
Not AddressedNo general data localisation requirement.
Significant Data Fiduciary
Not AddressedNo equivalent concept.
Government Data
Partially AddressedAccess to public information law applies. No comprehensive DP for government.
Coverage Summary
Quick Navigation
Need Compliance Help?
Our data privacy team can help you navigate Paraguay's regulations.
Book a Consultation