Paraguay Advances Towards Data Protection with New Bill Approved in Lower House
By BKM | Berkemeyer

Paraguay has taken a significant step toward modernizing its approach to data protection. A proposed law titled "Ley de Protección de Datos Personales" received initial approval (media sanción) from the Chamber of Deputies, marking the beginning of what could become a new legal framework for digital rights in the country.
The bill aims to establish a comprehensive and coherent framework for the protection of personal data. It outlines rules for both public and private entities that process personal information—regardless of whether the activity is for profit—and proposes the creation of a dedicated national data protection authority responsible for supervising and enforcing compliance.
Senator Patrick Kemper, one of the leading advocates for the initiative, hosted a public hearing to further socialize the Bill on July 4, 2025.
The proposal seeks to bring Paraguay in line with international legal standards, ensuring that the country respects fundamental rights and guarantees enshrined in its National Constitution, while also adapting to technological developments and regulatory trends seen across comparative jurisdictions in recent years.
One of the central principles of the bill is the recognition of personal data protection as an intrinsic right of every individual. It covers the handling of personal data in all contexts, including both traditional and digital platforms, and through existing or emerging technologies. This broad scope is a response to growing concerns that Paraguay’s current data legislation is outdated and does not reflect the complexities and risks of today’s data ecosystem.
The proposed law addresses a wide range of personal data types and seeks to give individuals greater control over how their information is collected, used, and shared.
The urgency of a new legislation has been highlighted by the exponential growth in the volume and use of personal data, coupled with the advent of new technologies capable of transforming how data is processed and exploited.
