Regulations › Rest of world › Ecuador
LOPDP
Organic Law on Personal Data Protection
WhenIn effect since 26 May 2021
Who enforces itSuperintendencia de Protección de Datos Personales (SPDP)
Who it applies toPublic and private processing of personal data in Ecuador, and foreign controllers offering goods or services to, or monitoring, its residents.
Tell the regulatorNotify the Superintendency within 5 days of becoming aware, unless the breach is unlikely to c…
DPO requiredDPO required for public-sector processing, large-scale systematic monitoring and large-scale p…
RegistrationControllers must register with and keep updated the National Personal Data Protection Registry
Transfers abroadTransfers allowed to countries declared adequate by the regulator, or with binding guarantees…
Request deadlineAccess, rectification, deletion and objection requests answered within 15 days
Maximum fineSerious infringements: 0.7% to 1% of prior-year business volume
Recent developments
Nothing reported yet. Regulatory Watch lists new rules, enforcement and court decisions as they arrive.
Regulations library
Every US state privacy law, on one map
24 states have a comprehensive privacy law in the library, alongside the EU, UK, US federal and global laws: 102 in all, each explained in plain words with its sources. Select a state to see what applies there.
- In force
- Coming into force
- Sector laws