Law: Please note this State does not have a general privacy law in effect, you can visit our US State Law Tracker to monitor the progress of US State bills.

Regulator: Department of Consumer Affairs ('DACO')

Summary: There is currently no comprehensive data privacy legislation in Puerto Rico; however, Puerto Rico has enacted data breach and data disposal laws in recent years. The Citizen Information of Data Banks Security Act under §4051 of Chapter 310 of Title 10 P.R. Laws Ann. of Puerto Rico Annotated ('the Security Act') establishes a data breach notification requirement. Furthermore, in June 2007 DACO expanded the obligations under the Security Act permitting DACO to publicise a breach within 24 hours where an entity was not able to identify the individuals whose sensitive information may have been affected.