El Salvador

El Salvador

Law Name

Bill for Personal Data Protection Law (2019)

Link to the Law


Data Transfer

With consent from the individual

Data Sharing

“Sensitive data” applies to health, religion, race or “any other condition that may lead to discrimination” Anonymization is needed for sharing data.

Data Retention

Data subjects have the right to deletion of personal data (on the internet) as long as the relationship between the parties is complete and as long as the mandatory log retention is not required.


If the bill passes the Congress, all institutions managing personal information should create guidelines for its use.


The Salvadorian Constitution and the National Penal Code establishes the legal framework for the “right to privacy”

Breach Notification

Not defined in the current bill

Health Privacy Law

Article 55 refers to health information in general

Electronic Health Records Law



Comprehensive guideline for personal data management in El Salvador: