The Superintendence of Banks of the Dominican Republic ('the Superintendence') announced, on 7 February 2022, the issuance of Circular No. 004/2022 for the establishment of a protocol for financial entities on the protection and proper use of personal data in the sale and marketing of products and financial services. In particular, the circular provides data subjects with certain protective rights, such as:

• receiving only commercial communications or calls which have been requested;
• revoking, at any time, the consent granted for the receipt of commercial communications or unsolicited calls;
• requesting, at any time, the blocking of personal data from the entity's database; and
• certain enforcement rights and the possibility of submitting claims against non-compliance with the provisions on the circular.

Moreover, the circular provides financial entities with a 90-day period to implement any adjustments in order to ensure compliance, and will require financial entities to, among other things:

• implement the policies and procedures that will allow its users the correctly exercise their rights; and
• inform data subjects about the rights listed on the circular, and provide these rights within the main options menu on the internet portal of the entity.

Furthermore, the circular provides that financial entities that violate the provisions contained in the circular will be subject to the application of sanctions by the Superintendence. 

You can read the press release here, and the circular here, both only available in Spanish.