|
El Salvador
|
|
Law Name
|
Bill for Personal Data Protection Law (2019)
|
|
Link to the Law
|
https://www.asamblea.gob.sv/sites/default/files/documents/correspondencia/2A326CE8-F13A-4828-8640-648235C228BF.pdf
|
|
Data Transfer
|
With consent from the individual
|
|
Data Sharing
|
“Sensitive data” applies to health, religion, race or “any other condition that may lead to discrimination” Anonymization is needed for sharing data. |
|
Data Retention
|
Data subjects have the right to deletion of personal data (on the internet) as long as the relationship between the parties is complete and as long as the mandatory log retention is not required. |
|
Governance
|
If the bill passes the Congress, all institutions managing personal information should create guidelines for its use.
|
|
Enforcement
|
The Salvadorian Constitution and the National Penal Code establishes the legal framework for the “right to privacy”
|
|
Breach Notification
|
Not defined in the current bill
|
|
Health Privacy Law
|
Article 55 refers to health information in general
|
|
Electronic Health Records Law
|
N/A
|
|
Notes
|
Comprehensive guideline for personal data management in El Salvador:
|
