Data & Privacy · Venezuela
Data protection & privacy laws in Venezuela (2026)
Venezuela shaded by its data & privacy status
Venezuela lacks a general, comprehensive data protection law. Privacy rights are anchored in the 1999 Constitution (habeas data in Art. 28; privacy in Art. 60) and partly operationalised by sector-specific legislation, with courts handling disputes via constitutional amparo actions. A 2011 Supreme Tribunal ruling articulated data-processing principles, but no omnibus statute has been enacted as of May 2026.
Key points
Article 28 of the 1999 Constitution grants every person the right to access, correct, and request destruction of personal data held in public or private registries. Article 60 protects honour, privacy, and confidentiality and requires that any use of electronic information be regulated by law.
The Ley Especial Contra los Delitos Informáticos (Official Gazette No. 37.313, 30 Oct 2001) criminalises unauthorised access, destruction, and disclosure of data held in information systems, providing heightened penalties when systems contain personal or patrimonial information.
The Ley sobre Protección a la Privacidad de las Comunicaciones protects the confidentiality of private communications. It is sector-specific and does not constitute a general data protection regime.
A 2011 ruling by the Sala Constitucional of the Tribunal Supremo de Justicia established that personal data must be collected with prior, revocable consent; processed for a specific, lawful purpose; not collected in excess of that purpose; and must be accurate and accessible to data subjects.
Venezuela has no national data protection authority. CONATEL (telecoms regulator) oversees electronic communications, and the National Superintendency of Banks issues guidance for the financial sector, but no body is empowered to enforce data protection rights across sectors.
Major breaches in 2025–2026 (including a Movistar breach affecting over 3.25 million Venezuelans and a Cashea App breach) have highlighted the absence of enforceable data protection obligations, breach-notification requirements, or a competent authority to investigate. As of May 2026 no comprehensive bill has been enacted.
Venezuela - other topics
Last verified 5/24/2026 · Orientation, not legal advice - verify against the primary sources linked above. Explore the full world map →