Ecuador. Comprehensive data protection. Decree
LOPDP RegulationGeneral Regulation of the Organic Law on Personal Data Protection (Executive Decree No. 904)
In force
Partly verified
Medium confidence. No verification notes recorded.§1Summary
- Synopsis
Implements the LOPDP with detail on consent, rights procedures, DPO appointment, risk assessments and international transfer mechanisms.
- Key themes
- Unique features
Supplemented by SPDP resolutions in 2025-2026 on transfers, DPO, pseudonymisation and legitimate interest.
- SaaS relevance
Provides operational rules SaaS providers must follow for Ecuadorian data.
§2Obligations
- Extraterritorial
- Yes
§3Dates
- Key dates
- Adopted
- In force
§4Text and authority
- Text
- Authoritative text spdp.gob.ec
- Authority
- Superintendencia de Protección de Datos Personales (SPDP)
§5Where it applies
- Domestic law of
- Ecuador
§6Sources and verification
- Sources consulted
- Verification
Medium confidence.
Partly verified
Medium confidence. No verification notes recorded.