The Superintendence of Personal Data Protection (SPDP) issued Resolution No. SPDP-SPD-2026-0009-R, through which it adopts the General Regulation for the Guarantee of the Right to Personal Data Protection in the Use of Artificial Intelligence Systems. The measure seeks to ensure that the principles and obligations established in the Organic Law on Personal Data Protection (LOPDP) and its regulations are fully applicable to those who develop or implement artificial intelligence systems that process personal data of Ecuadorian data subjects, regardless of the provider’s location.
The regulation clarifies that it does not govern a specific technology nor restrict its uses, but rather requires that data processing in artificial intelligence environments be conducted under a risk-based approach, incorporating technical, legal, and ethical measures proportionate to the level of risk. It also specifies that it will not apply to systems that do not process personal data within the material and territorial scope set forth in the LOPDP. Through this regulation, the SPDP demonstrates its commitment to responsible technological innovation, ensuring that personal data protection remains central to the country’s digital development.
