Law: Law No. 171 of 21 December 2018, Protection of Natural Persons with Regard to the Processing of Personal Data ('the Law')

Regulator: Guarantor for the Protection of Personal Data ('Guarantor')

Summary: The Law entered into force on 5 January 2019 and provides for a data protection framework that echoes the General Data Protection Regulation (Regulation (EU) 2016/679) ('GDPR'). In light of the above, the Law was drafted considering the third-country status of San Marino in an ongoing effort to obtain an adequacy decision from the European Commission and enable data flows with the EU. The Guarantor, an independent administrative authority made up of a three members collegial panel and an office, took office on 1 February 2020. In respect of the international landscape, San Marino has signed the Convention for the Protection of Individuals with Regard to Automatic Processing of Personal Data ('Convention 108'), and is also a member of the Global Privacy Assembly ('GPA'), following an accreditation resolution that included the Guarantor as a new member.