Ibero-American Data Protection Network (RIPD). Treaty / framework. Guidelines / model standards

RIPD StandardsStandards for Personal Data Protection for Ibero-American States (Estándares de Protección de Datos Personales para los Estados Iberoamericanos)

In force
Partly verifiedMedium confidence. The text_url is a Panamanian judiciary mirror; the official RIPD URL was not verified. The 2026 updated text is hosted by SEGIB (see sources) and is pending endorsement at the Summit.

§1Summary

Synopsis

Non-binding GDPR-inspired model standards for national data protection laws in Spain, Portugal and Latin America. They cover principles, data subject rights, controller accountability, DPIAs, DPOs, breach notification and international transfers.

Key themes
  • principles
  • ARCO rights
  • portability
  • accountability
  • DPIA
  • DPO
  • breach notification
  • transfers
Unique features

It acts as a regional GDPR template for Latin American law reform. The 2026 update adds neurodata as a special category and requires human intervention for decisions that are 'solely or essentially' automated.

SaaS relevance

Indicates the direction of Latin American national laws; it has no direct obligations.

§2Obligations

Breach notification
Recommended: authority and data subjects
DPO
Conditional
Cross-border transfers
Adequacy/contractual clauses/BCRs (model)
Maximum penalty
None

§3Dates

Key dates
  • Adopted
  • In force
  • Approved at the RIPD meeting in Santiago de Chile on 2017-06-20. An updated version (neurodata, AI and automated decisions, children) was approved unanimously at the Cartagena de Indias meeting in June 2026, for submission to the Ibero-American Summit in Madrid on 4–5 Nov 2026.

§4Text and authority

Text
Authority
Red Iberoamericana de Protección de Datos (RIPD)

§5Where it applies

Members of the body

Membership-based — check ratification status. Membership of Ibero-American Data Protection Network (RIPD) does not mean a state has signed or ratified this instrument.

§6Sources and verification

Sources consulted
Verification

Medium confidence.

Partly verifiedMedium confidence. The text_url is a Panamanian judiciary mirror; the official RIPD URL was not verified. The 2026 updated text is hosted by SEGIB (see sources) and is pending endorsement at the Summit.