New Developments in Latin American Privacy Law Laura Juanes Micas - - PowerPoint PPT Presentation

Laura Juanes Micas Global Director, Privacy Policy Engagement, Facebook

New Developments in Latin American Privacy Law

New Developments in Latin American Privacy Law

Global Context

New Developments in Latin American Privacy Law

Se Sectoral l / Comprehensiv ive Priv ivacy Laws in in Pla lace

Sectoral Comprehensive Sectoral / Comprehensive / State

New Developments in Latin American Privacy Law

Se Sectoral l / Comprehensiv ive Priv ivacy Proje jects

La LatAm: Bolivia El Salvador Guatemala Honduras ME MEA: Jordan Oman EEA Bahrain Mauritania Namibia Niger Nigeria Rwanda Saudi Arabia Tanzania UAE Zambia Zimbabwe AP APAC AC: Australia Cambodia Hong Kong India Indonesia Japan Malaysia Myanmar New Zealand Pakistan Philippines Singapore South Korea Taiwan Vietnam US US: : Sectoral / Comprehensive / State Jamaica Ecuador Chile Paraguay

New Developments in Latin American Privacy Law

Wh When we say privacy…

New Developments in Latin American Privacy Law

Regional Landscape

New Developments in Latin American Privacy Law

Or Origins

Habeas Data

Argentina Brazil Bolivia Chile Colombia Costa Rica Dominican Republic Honduras Mexico Panama Paraguay Uruguay Venezuela

Right to access, rectification, cancellation – enforced by the judiciary

New Developments in Latin American Privacy Law

1st

st Ge

Generation

Comprehensive Laws

Enacted:

• Argentina
• Aruba
• Brazil
• Bahamas
• Barbados
• Bermuda
• Cayman Islands
• Colombia
• Costa Rica
• Curaçao
• Dominican

Republic

• Mexico
• Nicaragua
• Panamá
• Peru
• Saint Kitts

& Nevis

• Saint

Martin

• Trinidad &

Tobago

• St. Lucia
• Uruguay

Work in progress:

• Bolivia
• Chile
• Ecuador
• El Salvador
• Guatemala
• Honduras
• Jamaica
• Paraguay

2nd generation:

• Uruguay
• Argentina (?)

New Developments in Latin American Privacy Law

Highlights

New Developments in Latin American Privacy Law

Ge Generally speaking…

EU inspired norms, adapted to Latin American needs With registration

• bligations

Consent based Focus on individual rights (access, correction, rectification…) Adequacy based Criminal liability Scattered precedent and case law

New Developments in Latin American Privacy Law

…H …However ever far from a a regional al stan andar dard

Closest alignment to GDPR in scope: Uruguay, Brazil, Barbados Most sui-generis: Mexico Legitimate interest as a legal basis: Brazil, Caribbean Other available basis: contractual necessity, legal requirements Mandatory DPO requirement: Bermuda, Brazil, Colombia, Mexico, Uruguay Registration obligations: Colombia, Barbados, Argentina Data breach notifications: Mandatory in Colombia, Brazil Exercise of rights: Deadlines between 10- 20 days to respond Data portability rights: Barbados, Brazil, Panama Adequate countries: Argentina & Uruguay

New Developments in Latin American Privacy Law

En Enablin ling data ta flo lows an and d interope perabi ability

Available mechanisms

EU Inspired

• Adequacy (‘white lists’)
• Consent
• Model Contracts
• Individual authorizations

LatAm Specific

• Intra-group transfers
• Combos (white lists + accountability)
• Exceptional circumstances (eg. natural disasters, medical

emergencies)

• Multilateral instruments / agreements (e.g. CBPRs, USCMA,

PA)

New Developments in Latin American Privacy Law

To Towards s regi gional har harmonizat ation?

• Drafting led by the Mexican DPA
• GDPR - inspired
• Not binding – yet very influential

http://www.redipd.es/documentacion/common/Estandares_eng_Con_logo_RIPD.pdf

New Developments in Latin American Privacy Law

Re Respondin ing to to COVID19

Facebook company 25/10/2019 Document name 15

Co Country Au Authority Do Documen ent and link Co Colombia SIC External Instruction No. 001, March 23, 2020 Supply of information to the National Planning Department and other state entities https://www.sic.gov.co/sites/default/files/normatividad/032020/Circular%20001.pdf.pdf External Instruction No. 002, March 24, 2020 Restriction on use of biometric readers https://www.sic.gov.co/sites/default/files/normatividad/032020/CIRCULAR%20002%20DE%2 02020_NO%20USO%20DE%20HUELLEROS.pdf Presidency Presidential Directive No. 02, 2020 Measures to Address the Contingency Generated by COVID-19 From Use of Information and Telecommunications Technologies https://coronaviruscolombia.gov.co/Covid19/docs/decretos/presidencia/Presidencia_de_la _republica.pdf Me Mexico INAI Microsite: Datos Personales Seguros COVID-19 Pe Peru ru APDP Statement- Personal Data Protection Authority of the MINJUSDH offers recommendations to avoid affecting privacy Ar Argentina Agencia de Acceso a la Información Pública Statement- Processing of personal data in the of the coronavirus Co Costa Rica Agencia de Protección de Datos de los Habitantes - PRODHAB Press Briefing– March 12, 2020 https://www.facebook.com/notes/agencia-de-protección-de-datos-de-los-habitantes- prodhab/tratamiento-de-datos-de-pacientes-covid-19/3314205095338857/ Ch Chile CPLT Oficio No. 211 https://www.consejotransparencia.cl/wp-content/uploads/2020/03/Oficio- CPLT_000211_17-Marzo.pdf

Re Respondin ing to to COVID19

New Developments in Latin American Privacy Law