Dominican Republic. Comprehensive data protection. Law
Law 172-13Organic Law No. 172-13 on the Comprehensive Protection of Personal Data
In force
Partly verified
Medium confidence.Text URL generic.
§1Summary
- Synopsis
Regulates personal data in databases, focusing heavily on credit information bureaus, with consent requirements, rights of access and correction and habeas data proceedings.
- Key themes
- Unique features
No national data protection authority; sanctions are criminal.
- SaaS relevance
Foreign transfers of Dominican data require express authorisation or contractual necessity.
§2Obligations
- Extraterritorial
- No
- Breach notification
- None
- DPO
- No
- Cross-border transfers
- Express consent or contractual necessity
- Maximum penalty
- Criminal: 6 months-2 years imprisonment and fines
§3Dates
- Key dates
- Adopted
- In force
- Comprehensive replacement bill (national DPA, 72h breach notice, extraterritorial scope) under discussion in Congress as of May 2026
§4Text and authority
- Text
- Authoritative text consultoria.gov.do
- Authority
- None general (Superintendencia de Bancos for credit bureaus; Pro Consumidor)
§5Where it applies
- Domestic law of
- Dominican Republic
§6Sources and verification
- Verification
Medium confidence.
Partly verified
Medium confidence.Text URL generic.