Paraguay Adopts First Comprehensive Personal Data Protection Law

Paraguay enacted Law 7593/2025 on Personal Data Protection, marking a significant milestone after more than four years of legislative discussions. The new law establishes the country’s first comprehensive framework governing the processing of personal data across both public and private sectors.

The legislation introduces a set of core rights for individuals, including access, rectification, deletion, portability, and consent. It also places clear obligations on organisations handling personal data, requiring them to ensure security, confidentiality, and transparency, with enhanced protections for children and adolescents. Non-compliance may result in sanctions.

A key feature of the law is the creation of the National Personal Data Protection Agency (Agencia Nacional de Protección de Datos Personales), operating under MITIC. The authority will oversee enforcement, handle complaints, and provide guidance on data protection practices.

Overall, the new framework represents a major step towards modernising Paraguay’s digital governance and aligning it with international standards, strengthening trust, regulatory clarity, and investment potential in data-driven sectors.