First Approval of the Personal Data Protection Law in Paraguay

TEDIC
Blog Personal Data

The bill identified as file D-2162170, titled “Protection of Personal Data in Paraguay”, was introduced on May 5, 2021, by a group of national deputies. This legislative initiative is the result of an extensive collaborative process led by the Personal Data Coalition and the Science and Technology Commission of the Chamber of Deputies. It brought together multiple stakeholders in a multi-actor roundtable that included representatives from academia, civil society, the private sector, the technical community, and state institutions. The initial drafting phase lasted nearly two years (2019–2021), during which efforts were made to align the proposal with Latin American regulatory frameworks, incorporate international standards such as the European Union’s General Data Protection Regulation (GDPR), and analyze the challenges and lessons learned from Spanish-speaking data protection agencies.

Since its submission to the National Congress, the bill has undergone numerous stages of analysis, delays, and revisions within the Chamber of Deputies—an indication of both its technical complexity and the political debate surrounding its treatment in this first phase of the constitutional process. The Personal Data Coalition closely followed each step of this process, participating in public hearings and bilateral meetings with political stakeholders to advocate for the adoption of this vital legislation by the Paraguayan state.

Timeline of the Bill in the Chamber of Deputies

The Legislative Information System (SILPY) outlines the timeline of this proposal within the Legislative Branch:

After several attempts in 2025, the Personal Data Protection bill reached a major milestone on May 27, when the Chamber of Deputies approved the proposal article by article during the thirteen item of its ordinary session. This achievement followed the general approval of the bill on December 17, 2024, and a subsequent review process in key committees: “Economic and Financial Affairs,” “Science and Technology,” and “Social Equity and Equality of Rights for Men and Women.” These committees incorporated technical recommendations provided by the Ministry of Information and Communication Technologies (MITIC), which led to a more concise version of the proposal.

With this approval, the bill now enters the second constitutional stage, in which it will be reviewed by the second chamber. For TEDIC and the organizations that make up the Personal Data Coalition of Paraguay, this approval marks a significant step toward establishing a comprehensive legal framework for data privacy. While the original version proposed by the Coalition included a broader scope with 85 articles, the approved version contains 60 articles—reflecting the outcome of legislative negotiation and revision. Substantive and in-depth comments from the Coalition will be shared during this new constitutional stage and published on the Coalition’s official website.