In El Salvador, the regulation of data privacy has undergone significant transformation with the enactment of the Personal Data Protection Law (Ley de Protección de Datos Personales) on November 12, 2024. This law, published in the Official Gazette on November 15, 2024, came into force on November 23, 2024, marking a pivotal step in the country's commitment to safeguarding personal information .
The enforcement and oversight of this law fall under the purview of the State Cybersecurity Agency (Agencia de Ciberseguridad del Estado, ACE). Established by the Cybersecurity and Information Security Law (Decree No. 143), ACE is an autonomous entity responsible for el-salvador phone number list developing and implementing policies related to cybersecurity and data protection . The agency's duties include creating standards for data protection, overseeing compliance, and issuing certifications to entities handling personal data .
The Personal Data Protection Law applies to both public and private entities that process personal data, regardless of whether the processing occurs within or outside El Salvador. However, certain activities are excluded from its scope, such as the processing of credit histories, data related to public security, and information processed for family or domestic purposes .
ACE is empowered to monitor compliance with the data protection law, conduct audits, and impose sanctions for violations. These sanctions can range from fines to more severe penalties, depending on the nature and gravity of the infraction . Entities subject to the law are required to implement measures to protect personal data and ensure individuals' rights to access, rectify, and delete their information.
The Library of Congress
In summary, the State Cybersecurity Agency serves as the central authority regulating data privacy in El Salvador, ensuring that personal data is handled responsibly and in compliance with the newly established legal framework.
Lexology.