Data & Privacy · Paraguay
Data protection & privacy laws in Paraguay (2026)
Paraguay shaded by its data & privacy status
Paraguay enacted its first comprehensive general data-protection law, Law No. 7593/2025, on 27 November 2025, replacing the limited prior sectoral regime anchored in Law No. 1682/2001. The law is GDPR-aligned in scope and rights but enters into full force only in November 2027, giving organisations a 24-month adaptation window. In the interim, the constitutional habeas data right (Article 135) and the legacy credit-data rules remain operative.
Key points
The Paraguayan Executive promulgated Law No. 7593/2025 on 27 November 2025 after Congressional approval; it is published in the official Biblioteca y Archivo Central del Congreso (BACN) gazette and enters into force 24 months after promulgation, i.e. approximately November 2027.
Law 7593/2025 creates the Agencia Nacional de Protección de Datos Personales (ANPDP) as a decentralised unit within MITIC with functional autonomy; it will supervise compliance, receive complaints, and issue guidelines. No independent DPA existed under the prior regime.
The law grants rights of access, rectification, deletion, portability, objection, and free revocation of consent, with enhanced safeguards for children and adolescents — closely mirroring GDPR Chapter III rights.
The law applies to any controller or processor: (i) established in Paraguay, (ii) processing data of persons located in Paraguay, (iii) offering goods/services in Paraguay, or (iv) monitoring behaviour of persons in Paraguay — irrespective of where processing occurs.
Law 7593/2025 supersedes Law No. 1682/2001 (as amended by Laws 1969/2002 and 5543/2015), which regulated only private/credit data and was enforced by the Central Bank and SEDECO consumer authority — leaving most personal-data processing unregulated.
Article 135 of Paraguay's 1992 Constitution enshrines habeas data, entitling every person to access data held about them in official or private public registries and to seek judicial update, rectification, or destruction of incorrect or rights-impairing data.
Paraguay - other topics
Last verified 5/24/2026 · Orientation, not legal advice - verify against the primary sources linked above. Explore the full world map →