PERSONAL DATA PROTECTION
Sanctions on Data Protection in Ecuador will begin to be imposed from May 2023:
Companies and public entities must train their employees and personnel on the handling of personal data within their organization. Additionally, they must implement processes to assess the measures implemented for the protection of this data. These obligations arise from the enforcement of the Organic Law on Personal Data Protection.
Penalties and fines are foreseen for those who fail to comply with the policy, including:
- Fines of up to 1% of the turnover of the previous economic year before the imposition of the fine;
- Definitive suspension of activity
- Obligation to fully compensate potential affected parties.
The firm is a representative of the Latin American Privacy Association in Ecuador (ALAP): with a multidisciplinary team of professionals specializing in Personal Data Protection.
Thus, López Ribadeneira Mora offers the following services related to personal data protection, among others:
- Formulation of the general privacy policy and specific privacy notices.
- Training for entity officials.
- Special contractual clauses for different roles within the entity and for contracts in general.
- Assessment of employees and third parties, formulation of the questionnaire, and scoring for evaluation.
- Data Mapping - Identification of sensitive points regarding privacy management and their mitigation.
- Guidance in the implementation of new regulations into the entity's internal processes and protocols.
Furthermore, we offer the possibility of obtaining the international GDPR certification (General Data Protection Regulation of the European Union) through ALAP and APEP (Spain).
We have a team of national and foreign experts to provide guidance on data protection management in Ecuador.
This way, it will be possible to avoid sanctions that will commence from May 2023 in Ecuador.
Contact for regulatory inquiries and services:
Daniel López Suárez
Chair and Leader of ALAP in Ecuador