Last review date: 30 December 2024
☒ omnibus – all personal data
☒ sector-specific
Telecommunications services; information and communication technologies; banking; medical professional practice and electoral.
☒ constitutional
Last review date: 30 December 2024
- Bolivian Political Constitution, 7 February 2009
- Telecommunications Law N°164, 8 August 2011
- Supreme Decree N° 1793, 13 November 2013
- Supreme Decree N° 1391, 24 October 2012
- Bolivian Criminal Code, 3 November 1834
- Supreme Decree N° 28168, 18 May 2005
- Code for Children and Adolescents, 27 October 1999
- Law N°018, 16 June 2010
- Tax Code, Law N° 2492, 2 August 2003
- Digital Citizenship Law N° 1080, 11 July 2018
- Financial Services Law N° 393, 21 August 2013
- General Consumer Rights Law N° 453, 4 December 2013
- Medical Professional Practice Law, 8 August 2005
- Law N° 3729 for the Prevention of HIV-AIDS, Protection of Human Rights and Integral Multidisciplinary Assistance for People living with HIV-AIDS, 8 August 2007
- Resolution N° 596/2019 of the Authority for the Supervision of the Financial System (Modifications to the Regulation for the Information Security Management)
- Criminal System Code, 20 December 2017
- Telecommunications Law N°164, 8 August 2011
- Bolivian Political Constitution, 7 February 2009
- Law of Official Statistics of the Plurinational State of Bolivia, 1 November 2021
- Law of Access to Public Information, 17 May 2005
- Cooperation agreement for the exchange of information, data consultation and mutual assistance between the customs administrations of Mercosur, 3 May 2017
- Supreme Decree 4904, 5 April 2023
- Supreme Decree 4907, 5 April 2023
- Supreme Decree 5200, 14 August 2024
Last review date: 30 December 2024
Possibly. In 2022, the Bolivian State accepted the implementation of a deadline to apply important guidelines on Data Privacy and Users Rights of Telecommunication Services in its legal framework by approving a supranational act issued by the Andean Community Commission ("Decision 897"). Decisions from the Commission of the Andean Community are legally binding for the Andean Community member states (Bolivia, Colombia, Ecuador, and Peru) and, pursuant to the Bolivian Constitution, have a higher hierarchy than local laws.
Decision 897 mandates that members of the Andean Community implement guidelines related to the protection of telecommunications users’ rights during the use of telecommunications networks and services. These guidelines cover substantial topics such as the creation of new data subject’s rights, rules for international data transfer, and security of personal data.
The deadline to implement these guidelines by incorporating them into new local legislation ended on 2 July 2024. Although the Bolivian State failed to enact the corresponding laws within the deadline provided, it is still compelled by the Andean Community Treaty to do so.
Moreover, a bill proposing the enactment of a comprehensive Data Protection Law is still pending in the Bolivian Congress.
In 2024, we anticipated material changes to the existing data privacy and security legal framework in Bolivia in light of Draft Law N°185/2019, which relates to the Protection of Personal Data. The Draft Law was presented by a Congressional representative on 30 November 2018, but has been pending revision for five years. Currently, the bill is archived, but it is possible that its sponsor will formally request its revision during the next year.