World Watch/Cuba/Data & Privacy

Data & Privacy · Cuba

Data protection & privacy laws in Cuba (2026)

Comprehensive lawLey No. 149/2022 'De Protección de Datos Personales' (Law on the Protection of Personal Data), supervised by the Ministry of CommunicationsCountry index 68 · B

Cuba shaded by its data & privacy status

Cuba enacted its first comprehensive personal data protection law, Ley No. 149/2022, on 25 August 2022; it entered into force on 21 February 2023. The law is grounded in Articles 40, 48, and 97 of Cuba's 2019 Constitution, which enshrine human dignity and the right to personal and family privacy. It regulates the collection and processing of personal data by both public and private entities and establishes individual data rights and administrative penalties for non-compliance.

Key points

Primary legislation

Ley No. 149/2022 'De Protección de Datos Personales' was adopted by the Cuban National Assembly and published in the Gaceta Oficial (edition O-90) on 25 August 2022, entering into force 180 days later on 21 February 2023.

Constitutional basis

The law gives legal effect to the right to protection of personal data enshrined in the 2019 Cuban Constitution, particularly Article 40 (human dignity), Article 48 (personal and family privacy, image, voice, honour and identity), and Article 97.

Supervisory authority

The Ministry of Communications (Ministerio de Comunicaciones) is the primary competent authority for enforcement, acting in coordination with the Ministry of the Interior, the Cuban Central Bank, and the Ministry of Justice for sanctioning purposes.

Individual rights

Data subjects are granted rights of access, rectification, erasure (once the original processing purpose is fulfilled), objection to processing that causes personal harm, and objection to automated decision-making — closely mirroring GDPR-style subject rights.

Scope and obligations

The law applies to any natural or legal person (public or private) that processes personal data in Cuba. Data controllers and processors must register databases, observe purpose-limitation and data-minimisation principles, and obtain valid consent where required.

Sanctions

Penalties for non-compliance include administrative fines of up to CUP 20,000, temporary suspension of the offending database (five days), and permanent closure of the database for serious or repeated violations.

Cuba - other topics

Last verified 5/24/2026 · Orientation, not legal advice - verify against the primary sources linked above. Explore the full world map →