PERSONAL DATA AND ITS LAWS title key

Data such as our home address, email address or telephone number are personal data; if they get into the wrong hands, they can harm us. Therefore, this project seeks to analyze the different personal data laws and initiatives in Latin America and contrast them with the internationally adopted Ibero-American Data Protection Standard.

WHY THIS
PROJECT lock icon

This project arises as an initiative to make available several analyses already carried out on personal data protection laws in Latin American countries, which include different questions that citizens and civil society ask themselves and can be solved with open data.

WHAT IS
PERSONAL
DATA? dot icon

Information that directly or indirectly identifies a person, i.e., it indicates the person (such as name, address or identification number), or gives clues as to the identity of the person.

WHICH LAWS ARE ANALYZEDHERE at icon

This project compares the personal data protection laws of Argentina, Bolivia, Brazil, Chile, Colombia, Costa Rica, Ecuador, Mexico, Panama, Paraguay, Peru and Uruguay against the Ibero-American Data Protection Standard. It also analyzes data initiatives promoted during the pandemic by COVID 19 and the opinion of citizens on the treatment of personal data.

compara

COMPARING
THE LAWS

The purpose of this regulatory analysis is to review the degree of progress of personal data laws among IDB member countries. Based on the thematic subjects of the Standards for Personal Data Protection, it identifies which laws in the region regulate these thematic subjects. From the research carried out, 12 countries with personal data protection laws in force were detected Argentina, Bahamas, Brazil, Colombia, Costa Rica, Ecuador, Mexico (with two laws), Nicaragua, Panama, Peru, Trinidad and Tobago and Uruguay. Even though Barbados and Jamaica, have their laws approved by parliament, both are pending enactment and, therefore, also pending entry into force. Although Chile has a privacy law that partially regulates a series of components in the area of personal data, it is not a specialized legislation on the subject. As for the Dominican Republic, the legislation has a sectoral scope, so it does not qualify as a cross-cutting legislation on the subject.

BARBADOS, MEXICO AND ECUADOR HAVE THE LAWS THAT MOST CLOSELY CONFORM TO THE STANDARD

Barbados with its "Data Protection Act" is the country that most complies with the Ibero-American Standard. It is followed by Mexico with the "Ley General de Protección de Datos Personales en Posesión de Sujetos Obligados" and Ecuador with its "Ley Orgánica de Protección de Datos Personales". The graph shows the score and number of laws that comply partially comply and do not comply for each country.

Explore data

Chile, Bahamas and Costa Rica have the laws that deviate the most from the standard

Chile's "Law 19628 on the protection of privacy" is the one that differs the most from the Standard (161 non-coincidences), followed by the Bahamas and Costa Rica (with 137 non-coincidences each).

Explore data
initiative

PANDEMIC INITIATIVES

It maps some of the digital technologies implemented by Latin American governments to collect information from the population in the context of COVID-19 and analyzes them from the point of view of digital rights. The methodological proposal contemplated both quantitative data collection and a qualitative analysis aimed at systematizing information related to the implementation of technological solutions as part of public policies and state practices in the context of pandemics. The more detailed evaluation is available in the COVID-19 AlSur Observatory

THE RIGHTS TO PROTECTION OF PERSONAL DATA AND PRIVACY ARE MOST AFFECTED

According to the evaluating organizations, the 12 initiatives analyzed in this study violate the right to the protection of personal data and, of these, 11 also violate the right to privacy. The right to access to information and the rights to freedom of movement and health are violated by 8 and 6 initiatives, respectively.

Explore data

ONLY THREE INITIATIVES CONTEMPLATE EXTERNAL EVALUATION OR AUDIT MECHANISMS

According to the analysis carried out, only the initiatives of Colombia, Ecuador and Uruguay include an external technical evaluation or audit mechanism. No information on this aspect is available for Brazil's initiative, and the other countries did not include such audit mechanisms.

Explore data
ciudadania

WHAT DO CITIZENS THINK?

As part of the study "Public services and digital government during the pandemic Perspectives of Citizens, Civil Servants and Government Institutions" a nationally representative telephone survey was conducted between July and August 2020 to 10,207 adult citizens from Chile, Costa Rica, Ecuador, El Salvador, Honduras, Mexico, Panama, Paraguay, Peru and Uruguay. The survey included a limited set of questions on procedures before and during the pandemic, future prospects, and citizens' views on personal data.

THERE IS A LACK OF KNOWLEDGE ABOUT THE MEANING OF PERSONAL DATA

51% of respondents to the question "Do you find that sharing your personal data has more benefits than risks?" with "More risks than benefits" (left axis), agreed with the question "Should the government fine people who are COVID19 positive and do not allow geolocation of their cell phones?" (right axis). Considering that it is risky to share personal data but empowering the government to fine those who do not allow geolocation could represent a discordance and reflect a disregard for personal data.

Explore data

SOME PEOPLE DO NOT FIND VALUE IN THEIR PERSONAL DATA

60% of those who answered No to the question "Do you know what governments do with your personal data?" (left axis) answered Yes to the question "Can the government provide benefits by collecting your and other people's data to overcome potential risks in times of pandemic?" (right axis). The willingness to hand over this information to the state without the need to know what is being done with it may reflect that these individuals do not find value in their personal data.

Explore data

IN TIMES OF PANDEMICS, PEOPLE CHANGE THEIR MINDS

61% of people who consider "more risks" to the question "Do you find that sharing your personal data has more benefits than risks?" (left axis) also consider there to be benefits to the question "Can the government provide benefits by collecting your and other people's data to overcome potential risks in times of pandemic?" (right axis). This could reflect a change in opinion regarding what is considered risky or beneficial when introducing the pandemic factor.

Explore data
explora

EXPLORE THE DATA

Enter the data explorer, perform visualizations and download the information you want with the key questions and search filters.

THIS PORTAL REPRESENTS A JOINT EFFORT OF THE FOLLOWING PARTICIPANTS

Consultant Edgardo Martinez Rojas

In charge of comparing the personal data protection legislation of the countries in the region with the Ibero-American Data Protection Standards.

Al Sur

Responsible for collecting information on personal data collection efforts during the pandemic.

Datasketch

Responsible for the design and visualization of the portal.

Latin American Initiative for Open Data (ILDA)

Supported in the coordination of some of the activities.

Inter-American Development Bank (IDB)

Funded and coordinated part of the platform and citizen survey efforts.