San Marino. Comprehensive data protection. Act
Law 171/2018Law No. 171 of 21 December 2018 on the protection of natural persons with regard to the processing of personal data (Legge n. 171/2018)
In force
Partly verified
Low confidence.Official and DPA sites blocked automated access; date (December 2018) and structure from prior knowledge, not verified this session. Penalties not verified.
§1Summary
- Synopsis
San Marino's GDPR-modelled data protection law, setting principles, rights, controller duties, breach notification and an independent supervisory authority.
- Key themes
- Unique features
Near-verbatim transposition of the GDPR by a non-EU microstate in a customs union with the EU.
- SaaS relevance
Applies to SaaS providers in or targeting San Marino.
§2Obligations
- Extraterritorial
- Yes
- Breach notification
- Authority within 72h; individuals if high risk
- DPO
- Conditional
- Cross-border transfers
- Adequacy/appropriate safeguards
§3Dates
- Key dates
- Adopted
- In force
§4Text and authority
- Text
- Authoritative text consigliograndeegenerale.sm
- Authority
- Autorità Garante per la protezione dei dati personali (San Marino)
§5Where it applies
- Domestic law of
- San Marino
§6Sources and verification
- Verification
Low confidence.
Partly verified
Low confidence.Official and DPA sites blocked automated access; date (December 2018) and structure from prior knowledge, not verified this session. Penalties not verified.