Paraguay. Comprehensive data protection. Law

Law 7593Law No. 7593/2025 on Personal Data Protection (Ley de Protección de Datos Personales)

Enacted – not yet in force

Partly verified

Medium confidence. Agency name, breach/DPO/extraterritorial details not verified.

§1Summary

Synopsis

Paraguay's first comprehensive data protection law covering all public and private entities. It sets lawful bases, rights with 30-day response deadlines, accountability and transfer rules, and creates a national supervisory agency.

Key themes

lawful bases
data subject rights
accountability
international transfers
national agency
sanctions

Unique features

Two-year transition; top fines expressed in minimum daily wages (jornales).

SaaS relevance

SaaS providers processing Paraguayan data will need to be compliant by late 2027.

§2Obligations

Cross-border transfers: Regulated (details not verified)
Maximum penalty: Up to 10,000 minimum daily wages

§3Dates

Key dates

Adopted 27 November 2025
In force November 2027
Promulgated 2025-11-27; fully enforceable 24 months later (late Nov 2027); implementing regulations pending

§4Text and authority

Text

Authoritative text bacn.gov.py

Authority

National data protection agency created by the law (Not yet established)

§5Where it applies

Domestic law of: Paraguay

§6Sources and verification

Sources consulted

Verification

Medium confidence.

Partly verified

Medium confidence. Agency name, breach/DPO/extraterritorial details not verified.