Law: There is no general data protection law.

Regulator: There is currently no general data protection authority.

Summary: Bolivia does not currently have a comprehensive data protection law regulating privacy and data protection matters. However, there are two draft laws that are in progress. In particular, bill No. 349/2020-2021 for the protection of personal data (only available in Spanish here) was initially introduced to the Legislative Assembly on October 19, 2021. On March 3, 2023, a motion for the reintroduction of the bill (only available in Spanish here) was filed in the Legislative Assembly by National Deputy Renan Cabezas Veizan. Separately, OneTrust DataGuidance Research confirmed, on April 25, 2023, with Ana Valeria Escobar, Partner at PPO Abogados, that the Electronic Government Agency and Information and Communication Technologies (AGETIC) had presented, on March 31, 2023, to the Bolivian Senate a new data protection bill (only available in Spanish here).

Both drafts would establish the Agency for the Protection of Personal Data (APP) as the national regulatory authority, but in the meantime, the AGETIC often regulates such matters. Bolivia also has specific provisions ensuring the protection of personal data in the financial, health care, and telecommunications sectors.