Panama. Comprehensive data protection. Law
Law 81Law No. 81 of 26 March 2019 on Personal Data Protection
In force
Partly verified
Medium confidence.Gazette URL from general knowledge.
§1Summary
- Synopsis
Panama's general data protection law setting consent, rights (ARCO and portability), security and transfer rules, with ANTAI as enforcer; Decree 285 adds breach notification and DPO rules.
- Key themes
- Unique features
Low fine ceiling (USD 10,000) but 72-hour breach notification; reform bill would raise fines to USD 100,000.
- SaaS relevance
SaaS providers handling data of Panamanian customers must support portability and notify breaches within 72h.
§2Obligations
- Extraterritorial
- Limited
- Breach notification
- ANTAI and data subjects within 72h
- DPO
- Conditional
- Cross-border transfers
- Consent, equivalent protection, contractual clauses
- Maximum penalty
- USD 1,000-10,000 per violation
§3Dates
- Key dates
- Adopted
- In force
- Two-year vacatio legis; Executive Decree 285 of 2021-05-28 regulates; sectoral DPO rules for banks (2022) and insurers (2025)
§4Text and authority
- Text
- Authoritative text gacetaoficial.gob.pa
- Authority
- Autoridad Nacional de Transparencia y Acceso a la Información (ANTAI) - Directorate for Personal Data Protection
§5Where it applies
- Domestic law of
- Panama
§6Sources and verification
- Sources consulted
- Verification
Medium confidence.
Partly verified
Medium confidence.Gazette URL from general knowledge.