Dominican Republic Law 172-13 enforcement and governance framework. Mixed-regulator approach with Superintendencia de Bancos (credit-information sector + general consumer banking) + INDOTEL telecommunications + Protecom consumer protection + sectoral regulators + Public Defender (Defensor del Pueblo) constitutional rights protection + Office of the Attorney General criminal investigation + pending establishment of National Data Protection Agency via 2024 Modernisation Bill. Article 77 Sanctions and Penalties (Sanciones y Penalidades) - administrative + criminal. Administrative: warnings + reprimands + revocation of authorisation + temporary or permanent ban + fines DOP 50K-50M per violation + cumulative. Criminal Article 364 Penal Code unauthorised disclosure 3 months-2 years imprisonment + DOP 100K-1M fines + aggravated for sensitive data + corporate criminal liability. Article 78 Investigation + inspection powers + production of records + access to systems + interviews. Article 79 Judicial review by Tribunal Superior Administrativo + appeal to Supreme Court of Justice (Suprema Corte de Justicia) + Constitutional Tribunal for constitutional challenges. Modernisation 2024 Bill anticipated additions: independent National Data Protection Agency + GDPR + Convention 108+ alignment + DPO mandatory + 72-hour breach notification + Privacy by Design + Privacy by Default + administrative fines up to DOP 1B or 4% turnover + Accountability principle + DPIA mandatory + Records of Processing Activities + Data Protection by Default. Supervisory cooperation with Iberoamerican Data Protection Network (RIPD) + Convention 108+ Committee + LatAm + Caribbean cooperation.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.