Ecuador has implemented data protection legislation that applies across sectors in Ecuador. Companies subject to the law in Ecuador should be familiar with all relevant privacy and data security laws or regulations, including those listed below.

National Data Protection Authority - Other Government Agencies

Superintendency of Personal Data Protection
National Assembly

Privacy Law and Regulations

National-Federal Laws and Regulations
Organic Law on Personal Data Protection
General Regulation of the Organic Law on Personal Data Protection, Decree 904 of 11/2023
Resolution Nº SPDP-SPD-2026-0004-R, General Rule For Transfers Or Communications National And International Personal Data
Resolution No. SPDP-SPD-2025-0024-R, Regulations for the International Transfers or Communications of Personal Data
Resolution No. SPDP-SPD-2025-0028-R Regulations of the Personal Data Protection Officer
Resolution SPDP-SPD-2025-0030-R Regulations for Pseudonymization, Anonymization, Blocking and Deletion of Personal Data)
Resolution No. SPDP-SPD-2025-0041-R, Regulations for the Application of Legitimate Interest as a Basis for the Processing of Personal Data within the Territory of the Republic of Ecuador
Constitution
Anti-Spam Laws and Regulations
Executive Decree Nº 3496 - Electronic Commerce Regulations