Ecuador has implemented data protection legislation that applies across sectors in Ecuador. Companies subject to the law in Ecuador should be familiar with all relevant privacy and data security laws or regulations, including those listed below.
Privacy Law and Regulations
National-Federal Laws and Regulations
Organic Law on Personal Data Protection
General Regulation of the Organic Law on Personal Data Protection, Decree 904 of 11/2023
Resolution Nº SPDP-SPD-2026-0004-R, General Rule For Transfers Or Communications National And International Personal Data
Resolution No. SPDP-SPD-2025-0024-R, Regulations for the International Transfers or Communications of Personal Data
Resolution No. SPDP-SPD-2025-0028-R Regulations of the Personal Data Protection Officer
Resolution SPDP-SPD-2025-0030-R Regulations for Pseudonymization, Anonymization, Blocking and Deletion of Personal Data)
Resolution No. SPDP-SPD-2025-0041-R, Regulations for the Application of Legitimate Interest as a Basis for the Processing of Personal Data within the Territory of the Republic of Ecuador
Constitution

