Law 7593/2025 on Personal Data Protection
National Personal Data Protection Agency
This is Paraguay's current statute protecting personal credit data. It governs collection, storage, processing and disclosure in the credit-information ecosystem and allocates oversight between the Central Bank of Paraguay and the consumer authority, SEDECO.
Controllers must use credit information only for lawful, defined purposes; keep it accurate and current; secure it against unauthorised access; preserve confidentiality; and enable access, correction and deletion where the statutory conditions are met.
Credit-reporting and user organisations must also respect the law's limits on data categories, consultation, communication and retention, and must be able to demonstrate the source and permitted use of information.
These controls apply now. They are separate from the future comprehensive regime under Law 7593/2025.
National Personal Data Protection Agency