🇩🇴Law 172-13 on Protection of Personal Data
← Back to laws in Dominican Republic
Law 172-13
The general regime requires data quality, adequate information, consent or another statutory justification, security, confidentiality and respect for access, rectification and cancellation. Access responses are generally due within five business days; rectification or cancellation within ten.
Credit-information scope
Separate chapters govern sociedades de información crediticia and subscribers. Those provisions address authorisation, subscriber agreements, permitted purposes, security manuals, source and quality controls, dispute markers, correction workflows and credit-reporting periods.
The Superintendencia de Bancos supervises the SIC regime. General data rights also rely on judicial habeas-data remedies; the law does not create a GDPR-style regulator for every processing activity.