Mis Datos, Mis Derechos is an initiative led by TEDIC that was developed in a context marked by the absence of a comprehensive and up-to-date regulatory framework on personal data protection in Paraguay. The project emerged from the need to establish clear rules to protect people’s identities in digital environments and to regulate the processing of personal data in both the public and private sectors.

The initiative was launched prior to the approval of the Personal Data Protection Law, with the aim of contributing to civic education and empowerment by creating tools to help people understand what personal data are, why their protection is a right, and what the implications were of not having a specific legal framework in place. From a human rights–based approach, the project seeks to bring these debates closer to the public through accessible content grounded in local realities.

Legislative context

Until recently, Paraguay lacked a comprehensive personal data protection law, creating a scenario of institutional weakness regarding the use, collection, and circulation of personal information. The recent adoption of Law No. 7593/2025 on Personal Data Protection marked a milestone for the country and is the result of the sustained work of the Personal Data Coalition, a broad and plural civil society alliance that promoted and defended the bill over the years. In this process, TEDIC played a key role by contributing research, technical and political advocacy, and a human rights perspective that decisively shaped the drafting and approval of the legislation.

However, the mere existence of a legal framework does not in itself guarantee the effective exercise of the rights it recognizes. The implementation of the law, the strengthening of institutional capacities, and public access to clear and understandable information about this newly recognized right remain central challenges. In this context, My Data, My Rights provides inputs and tools aimed at fostering social ownership of the right to personal data protection.

Materials produced as part of the project

As part of the project, TEDIC developed a series of four fanzines designed as pedagogical, visual, and freely distributable materials. Each one addresses different aspects of personal data processing through everyday situations and concrete issues:

SPAM: when our data circulate without consent
This fanzine addresses unsolicited messages as one of the most common forms of personal data misuse. It explains how companies access our information, what rights we have in the face of these practices, and why consent is a core principle of data protection.

Biometrics: my body as data
Through clear examples, this material problematizes the use of biometric data—such as facial recognition and fingerprints—and the risks involved when these technologies are implemented without adequate safeguards, especially in contexts of surveillance and control.

Towards a comprehensive personal data protection law
This fanzine serves an introductory role: it explains what personal data are, why their protection is a human right, and the historical shortcomings of the Paraguayan State in this area, offering key elements to understand the importance of having a specific legal framework.

The importance of protecting our sensitive health data
Focusing on one of the most sensitive categories of personal data, this material highlights the risks associated with the processing of health data and the need for higher standards of protection, confidentiality, and accountability.

These fanzines were accompanied by dissemination actions and public conversations aimed at expanding the reach of the content and fostering critical reflection on how our data permeate multiple dimensions of social life.

Mis datos Mis derechos is situated at a key moment for Paraguay: the country now has a recently adopted law, but faces the urgent challenge of making it effective. Along this path, the role of an informed and organized citizenry is fundamental.

From TEDIC, this project reaffirms our commitment to the defense of human rights in digital environments and to the construction of a data protection culture that places dignity, autonomy, and meaningful participation at its core. Because privacy is neither a privilege nor an abstract concept—it is a right that is learned, exercised, and defended collectively.