Paraguay Law No. 7593/2025 on Personal Data Protection
Paraguay's comprehensive personal data protection law, published 27 November 2025 and in force from 27 November 2027: principles including accountability and due diligence, seven legal bases with legitimate interest, consent and parental consent under sixteen, controller, joint controller and processor duties, impact assessments and prior consultation, a continual security programme, 72-hour breach notification to the new National Agency for the Protection of Personal Data, data protection officers, adequacy-based international transfers, sensitive data, video surveillance and public sector rules, and access, rectification, objection, erasure, portability and automated-decision rights answered within thirty days; fines up to 10,000 daily minimum wages.
Paraguay Law No. 7593/2025 on Personal Data Protection is a compliance framework from Paraguay with 7 domains and 36 controls. The largest domains are Title I: Principles of personal data protection – Paraguay Law No. 7593/2025 on Personal Data Protection (9 controls), Title II Chapter II: Obligations of the controller and processor – Paraguay Law No. 7593/2025 on Personal Data Protection (9 controls), Title III: Rights of data subjects – Paraguay Law No. 7593/2025 on Personal Data Protection (8 controls). Every control below carries what it requires and what an assessor expects to see.
Framework summaries on this platform are AI-assisted interpretations for educational and compliance planning purposes. They do not reproduce or replace the official standards. Refer to the authoritative source for the definitive text. Framework names and trademarks belong to their respective organisations.
Framework Domains (7)
Title I: Principles of personal data protection – Paraguay Law No. 7593/2025 on Personal Data Protection
Title II Chapter I: Legal bases for processing – Paraguay Law No. 7593/2025 on Personal Data Protection
| Code | Title |
|---|---|
| paraguay-law-no-7593-2025-on-personal-data-protection::5 | Article 5 Legal bases for processing |
| paraguay-law-no-7593-2025-on-personal-data-protection::6 | Article 6 Conditions for consent |
| paraguay-law-no-7593-2025-on-personal-data-protection::7 | Article 7 Children and adolescents |
| paraguay-law-no-7593-2025-on-personal-data-protection::8 | Article 8 Legitimate interest |
Title II Chapter II: Obligations of the controller and processor – Paraguay Law No. 7593/2025 on Personal Data Protection
| Code | Title |
|---|---|
| paraguay-law-no-7593-2025-on-personal-data-protection::10 | Article 10 Joint controllers |
| paraguay-law-no-7593-2025-on-personal-data-protection::11 | Article 11 Processors and sub-processors |
| paraguay-law-no-7593-2025-on-personal-data-protection::12 | Article 12 Representative of non-established controllers and processors |
| paraguay-law-no-7593-2025-on-personal-data-protection::14 | Article 14 Data protection impact assessment |
| paraguay-law-no-7593-2025-on-personal-data-protection::15 | Article 15 Prior consultation |
| paraguay-law-no-7593-2025-on-personal-data-protection::16 | Article 16 Security measures programme |
| paraguay-law-no-7593-2025-on-personal-data-protection::17 | Article 17 Security incident notification within 72 hours |
| paraguay-law-no-7593-2025-on-personal-data-protection::18 | Article 18 Data protection officer |
| paraguay-law-no-7593-2025-on-personal-data-protection::9 | Article 9 Controller accountability |
Title II Chapter III: International data transfers – Paraguay Law No. 7593/2025 on Personal Data Protection
| Code | Title |
|---|---|
| paraguay-law-no-7593-2025-on-personal-data-protection::19 | Article 19 International transfers |
Title II Chapter IV: Particular categories of processing – Paraguay Law No. 7593/2025 on Personal Data Protection
| Code | Title |
|---|---|
| paraguay-law-no-7593-2025-on-personal-data-protection::20 | Article 20 Sensitive data |
| paraguay-law-no-7593-2025-on-personal-data-protection::22 | Article 22 Video surveillance |
| paraguay-law-no-7593-2025-on-personal-data-protection::23 | Article 23 Criminal and administrative offence data |
Title II Chapter V: Processing in the public sector – Paraguay Law No. 7593/2025 on Personal Data Protection
| Code | Title |
|---|---|
| paraguay-law-no-7593-2025-on-personal-data-protection::24 | Article 24 Access to public information and personal data |
| paraguay-law-no-7593-2025-on-personal-data-protection::25 | Article 25 Exchange of data between public institutions |
Title III: Rights of data subjects – Paraguay Law No. 7593/2025 on Personal Data Protection
| Code | Title |
|---|---|
| paraguay-law-no-7593-2025-on-personal-data-protection::26 | Article 26 Handling rights requests within thirty days |
| paraguay-law-no-7593-2025-on-personal-data-protection::27 | Article 27 Right to information and notice content |
| paraguay-law-no-7593-2025-on-personal-data-protection::28 | Article 28 Right of access |
| paraguay-law-no-7593-2025-on-personal-data-protection::29 | Article 29 Right of rectification |
| paraguay-law-no-7593-2025-on-personal-data-protection::30 | Article 30 Right to object |
| paraguay-law-no-7593-2025-on-personal-data-protection::31 | Article 31 Right to erasure |
| paraguay-law-no-7593-2025-on-personal-data-protection::32 | Article 32 Right to portability |
| paraguay-law-no-7593-2025-on-personal-data-protection::33 | Article 33 Automated and semi-automated decisions |
What is Paraguay Law No. 7593/2025 on Personal Data Protection and who does it apply to?
Paraguay Law No. 7593/2025 on Personal Data Protection is a compliance framework from Paraguay with 7 domains and 36 controls. Paraguay's comprehensive personal data protection law, published 27 November 2025 and in force from 27 November 2027: principles including accountability and due diligence, seven legal bases with legitimate interest, consent and parental consent under sixteen, controller, joint controller and processor duties, impact assessments and prior consultation, a continual security programme, 72-hour breach notification to the new National Agency for the Protection of Personal Data, data protection officers, adequacy-based international transfers, sensitive data, video surveillance and public sector rules, and access, rectification, objection, erasure, portability and automated-decision rights answered within thirty days; fines up to 10,000 daily minimum wages. It is used by organisations to establish and maintain compliance with industry standards and regulatory requirements.
What does Paraguay Law No. 7593/2025 on Personal Data Protection actually require?
Paraguay Law No. 7593/2025 on Personal Data Protection has 36 controls organised across 7 domains. The largest domains are Title I: Principles of personal data protection – Paraguay Law No. 7593/2025 on Personal Data Protection (9 controls), Title II Chapter II: Obligations of the controller and processor – Paraguay Law No. 7593/2025 on Personal Data Protection (9 controls), Title III: Rights of data subjects – Paraguay Law No. 7593/2025 on Personal Data Protection (8 controls). Each control defines specific requirements that organisations must implement to achieve compliance.
If I already comply with another framework, how much of Paraguay Law No. 7593/2025 on Personal Data Protection do I already cover?
Paraguay Law No. 7593/2025 on Personal Data Protection does not currently have cross-framework mappings in our system. Check back as we continuously expand our mapping database.
How do I implement Paraguay Law No. 7593/2025 on Personal Data Protection?
Start your Paraguay Law No. 7593/2025 on Personal Data Protection compliance journey by running a self-assessment on our platform to identify your current compliance posture. Our AI advisory can answer specific questions about Paraguay Law No. 7593/2025 on Personal Data Protection requirements, and cross-framework mapping helps you leverage existing controls from other frameworks you may already comply with. Create a free account to access all 36 controls and track your progress.
Start Your Compliance Journey
Create a free account to run self-assessments, get AI advisory, and track your compliance progress across 723 frameworks.
Get Started Free →Free forever — no credit card required