Paraguay Law on Protection of Personal Data (Law No. 6534/2020)
Paraguay's Law No. 6534/2020 on the Protection of Personal Credit Data, in force since 27 October 2020 and the country's operative data protection law until Law No. 7593/2025 takes effect on 27 November 2027: express informed consent with the burden of proof on the controller, data quality, access, update, rectification, suppression, objection and portability free of charge, a five-year cap on adverse data, security and secrecy duties, Central Bank licensing of credit bureaus, the eligible users and their reporting, notice and adverse-decision duties, prohibited employment and health uses of credit data, and bureau deletion rules; enforced by the Central Bank and the consumer secretariat with fines of up to 15,000 daily minimum wages.
Paraguay Law on Protection of Personal Data (Law No. 6534/2020) is a compliance framework from Paraguay with 3 domains and 28 controls that map to 37 other frameworks. The largest domains are Chapter II: Credit information bureaus and their users – Paraguay Law on Protection of Personal Data (Law No. 6534/2020) (14 controls), Article 21: Duties the Law states only as infractions – Paraguay Law on Protection of Personal Data (Law No. 6534/2020) (7 controls), Chapter I: Consent, quality, rights, retention, security and secrecy – Paraguay Law on Protection of Personal Data (Law No. 6534/2020) (7 controls). Every control below carries what it requires and what an assessor expects to see.
Framework summaries on this platform are interpretations grounded in the published source, for educational and compliance planning purposes. They do not reproduce or replace the official standards. Refer to the authoritative source for the definitive text. Framework names and trademarks belong to their respective organisations.
Framework Domains (3)
Article 21: Duties the Law states only as infractions – Paraguay Law on Protection of Personal Data (Law No. 6534/2020)
| Code | Title |
|---|---|
| paraguay-law-on-protection-of-personal-data-law-no-6534-2020::21(k) | Article 21(k) Notifying rectification, erasure and restriction to recipients |
| paraguay-law-on-protection-of-personal-data-law-no-6534-2020::21(n) | Article 21(n) Joint controller arrangement |
| paraguay-law-on-protection-of-personal-data-law-no-6534-2020::21(o) | Article 21(o) Processor adherence to the contract and instructions |
| paraguay-law-on-protection-of-personal-data-law-no-6534-2020::21(p) | Article 21(p) Notifying a security breach to the authority |
| paraguay-law-on-protection-of-personal-data-law-no-6534-2020::21(u) | Article 21(u) Minors' consent |
| paraguay-law-on-protection-of-personal-data-law-no-6534-2020::21(v) | Article 21(v) Data protection by design |
| paraguay-law-on-protection-of-personal-data-law-no-6534-2020::21(x) | Article 21(x) International transfers only with guarantees |
Chapter I: Consent, quality, rights, retention, security and secrecy – Paraguay Law on Protection of Personal Data (Law No. 6534/2020)
| Code | Title |
|---|---|
| paraguay-law-on-protection-of-personal-data-law-no-6534-2020::10 | Article 10 Security of data |
| paraguay-law-on-protection-of-personal-data-law-no-6534-2020::11 | Article 11 Duty of secrecy |
| paraguay-law-on-protection-of-personal-data-law-no-6534-2020::4 | Article 4 Prohibition on publishing sensitive data |
| paraguay-law-on-protection-of-personal-data-law-no-6534-2020::6 | Article 6 Informed consent |
| paraguay-law-on-protection-of-personal-data-law-no-6534-2020::7 | Article 7 Quality of information |
| paraguay-law-on-protection-of-personal-data-law-no-6534-2020::8 | Article 8 Exercise of the data subject's rights |
| paraguay-law-on-protection-of-personal-data-law-no-6534-2020::9 | Article 9 Right to be forgotten for credit data |
Chapter II: Credit information bureaus and their users – Paraguay Law on Protection of Personal Data (Law No. 6534/2020)
| Code | Title |
|---|---|
| paraguay-law-on-protection-of-personal-data-law-no-6534-2020::12 | Article 12 Permitted content of credit information services |
| paraguay-law-on-protection-of-personal-data-law-no-6534-2020::13 | Article 13 Credit bureaus authorised by the Central Bank |
| paraguay-law-on-protection-of-personal-data-law-no-6534-2020::14 | Article 14 Eligible users and their reporting duty |
| paraguay-law-on-protection-of-personal-data-law-no-6534-2020::15 | Article 15 Prohibited uses of credit information |
| paraguay-law-on-protection-of-personal-data-law-no-6534-2020::16 | Article 16 Rights of the holders of credit information |
| paraguay-law-on-protection-of-personal-data-law-no-6534-2020::17(a) | Article 17(a) Bureau handling standards, integrity and currency |
| paraguay-law-on-protection-of-personal-data-law-no-6534-2020::17(d) | Article 17(d) Bureau rectification and complaint routing |
| paraguay-law-on-protection-of-personal-data-law-no-6534-2020::17(g) | Article 17(g) Deletion of expired information and items that may not be reported |
| paraguay-law-on-protection-of-personal-data-law-no-6534-2020::17(h) | Article 17(h) Full history to the data subject within 24 hours |
| paraguay-law-on-protection-of-personal-data-law-no-6534-2020::18(a) | Article 18(a) User reporting and confidential use |
| paraguay-law-on-protection-of-personal-data-law-no-6534-2020::18(c) | Article 18(c) Notice of sale or assignment of credit portfolios |
| paraguay-law-on-protection-of-personal-data-law-no-6534-2020::18(d) | Article 18(d) Notice of an adverse decision based on a credit report |
| paraguay-law-on-protection-of-personal-data-law-no-6534-2020::18-notice | Article 18-notice Notice before consulting credit information |
| paraguay-law-on-protection-of-personal-data-law-no-6534-2020::19 | Article 19 Maximum publication period for credit information |
Your Compliance Coverage
If you comply with Paraguay Law on Protection of Personal Data (Law No. 6534/2020), you already cover:
Barbados Data Protection Act 2019
3%
1 controls mapped
Compare →Vietnam PDPD
3%
1 controls mapped
Compare →Vietnam Law on Cybersecurity (No. 116/2025/QH15)
3%
1 controls mapped
Compare →+ 34 more: Vermont Data Privacy and Online Surveillance Act (3%), Turkey KVKK (3%)
See all 37 mapped frameworks ↓Maps to 37 other frameworks
Coverage is not the same as your position
This page shows what Paraguay Law on Protection of Personal Data (Law No. 6534/2020) overlaps with in general. Where your organisation actually stands, against the standard you are going for and the certifications you already hold, is a different question. Same graph and the same recorded refutations, scoped to you rather than to a pair.
The Compliance Position Diagnostic, $5,000 fixed, ten business daysWhat is Paraguay Law on Protection of Personal Data (Law No. 6534/2020) and who does it apply to?
Paraguay Law on Protection of Personal Data (Law No. 6534/2020) is a compliance framework from Paraguay with 3 domains and 28 controls. Paraguay's Law No. 6534/2020 on the Protection of Personal Credit Data, in force since 27 October 2020 and the country's operative data protection law until Law No. 7593/2025 takes effect on 27 November 2027: express informed consent with the burden of proof on the controller, data quality, access, update, rectification, suppression, objection and portability free of charge, a five-year cap on adverse data, security and secrecy duties, Central Bank licensing of credit bureaus, the eligible users and their reporting, notice and adverse-decision duties, prohibited employment and health uses of credit data, and bureau deletion rules; enforced by the Central Bank and the consumer secretariat with fines of up to 15,000 daily minimum wages. It is used by organisations to establish and maintain compliance with industry standards and regulatory requirements.
What does Paraguay Law on Protection of Personal Data (Law No. 6534/2020) actually require?
Paraguay Law on Protection of Personal Data (Law No. 6534/2020) has 28 controls organised across 3 domains. The largest domains are Chapter II: Credit information bureaus and their users – Paraguay Law on Protection of Personal Data (Law No. 6534/2020) (14 controls), Article 21: Duties the Law states only as infractions – Paraguay Law on Protection of Personal Data (Law No. 6534/2020) (7 controls), Chapter I: Consent, quality, rights, retention, security and secrecy – Paraguay Law on Protection of Personal Data (Law No. 6534/2020) (7 controls). Each control defines specific requirements that organisations must implement to achieve compliance.
If I already comply with another framework, how much of Paraguay Law on Protection of Personal Data (Law No. 6534/2020) do I already cover?
Paraguay Law on Protection of Personal Data (Law No. 6534/2020) maps to 37 other compliance frameworks. The top mapping partners are Barbados Data Protection Act 2019 (3% coverage), Vietnam PDPD (3% coverage), Vietnam Law on Cybersecurity (No. 116/2025/QH15) (3% coverage). Use our comparison tool to explore control-level mappings between frameworks.
How do I implement Paraguay Law on Protection of Personal Data (Law No. 6534/2020)?
Start your Paraguay Law on Protection of Personal Data (Law No. 6534/2020) compliance journey by running a self-assessment on our platform to identify your current compliance posture. Our AI advisory can answer specific questions about Paraguay Law on Protection of Personal Data (Law No. 6534/2020) requirements, and cross-framework mapping helps you leverage existing controls from other frameworks you may already comply with. Create a free account to access all 28 controls and track your progress.
Start Your Compliance Journey
Create a free account to run self-assessments, get AI advisory, and track your compliance progress across 1,073 frameworks.
Get Started Free →Free forever, no credit card required