The Paraguayan Executive promulgated on 28 November 2025, Law 7593/2025 on Personal Data Protection, after more than four years of legislative debate. This marks the country’s first comprehensive legal framework regulating the treatment of personal data across both public and private sectors.
The Law establishes rights for individuals including access, rectification, deletion, portability and consent; and imposes obligations of security, confidentiality and transparency on any entity that handles personal data, with reinforced protection for children and teenagers. Violations will be subject to sanctions.
The legislation also creates a new regulatory body, the Agencia Nacional de Protección de Datos Personales (under the MITIC) tasked with supervising compliance, attending complaints, and guiding proper data handling practices.
Paraguay’s new data protection framework marks a decisive step toward modernizing its digital governance and aligning with global privacy standards. While transparency concerns persist, the law’s establishment of clear rights, obligations, and an independent supervisory authority positions the country to strengthen citizen trust, improve regulatory certainty, and attract investment in sectors that rely on responsible data management.
