Law 6534/2020 on the Protection of Personal Credit Data
Banco Central del Paraguay / SEDECO
Law 7593 establishes Paraguay's comprehensive personal-data protection regime, creates a national data-protection authority and applies to controllers and processors within its territorial and extraterritorial scope.
The law requires lawful and transparent processing, purpose limitation, minimisation, quality, retention control and demonstrable accountability. It adds data-subject rights, processor contracts, privacy by design, security and incident management, cross-border transfer safeguards, records and risk-based impact assessment.
Published 27 November 2025, the law enters into force 24 months later, on 27 November 2027. The mapped controls are implementation-readiness tasks, not claims that these duties are already operative.
Banco Central del Paraguay / SEDECO