Law: Law No. 1682 Which Regulates Private Information 2001 (only available in Spanish here), as amended by Law No. 1969 of 2002 (only available in Spanish here), and Law No. 5543 of 2015 (only available in Spanish here) ('the Private Information Law')
Regulator: There is no general data protection authority.
Summary: Paraguay combines a constitutional rights-based model of data protection with its Private Information Law. The Private Information law regulates the collection, storage, distribution, publication, modification, destruction, duration, and overall processing of personal data in files, registers, data banks, or other technical means of processing of public or private data intended to provide reports. Violations of the provisions of the Private Information Law are enforced by the courts and subject to fines.
On 30 April 2021, the Chamber of Deputies announced a Bill on the Protection of Personal Data of the Republic of Paraguay (only available in Spanish here) ('the Bill'). The Bill provides a more comprehensive data protection in Paraguay and proposes, among other things, new data subject rights, security standards and obligations, and new requirements associated with data protection officers. Other key areas of privacy regulation in Paraguay include its legal framework for anti-money laundering and countering the financing of terrorism ('AML/CFT'), which was recently amended on 26 December 2019 with the signing into law of Law No. 6497 (only available in Spanish here).