El Salvador is making strides in safeguarding its citizens’ personal information and digital security by introducing two landmark laws: the Cybersecurity and Information Security Law and the Personal Data Protection Law, approved by the Legislative Assembly on November the 12th.

The Cybersecurity and Information Security Law aims to protect citizens’ data while preventing cybercrimes such as fraud, identity theft, and digital harassment. The law mandates that both public and private institutions handling personal data implement robust security measures to safeguard the information they collect.

In tandem with the cybersecurity law, the Personal Data Protection Law focuses on protecting individual privacy. It sets clear guidelines on how personal data should be collected, processed, and stored, ensuring that the citizens have control over their own information.

This law protects citizens from unauthorized use of their personal information and establishes citizens’ rights to access, correct, delete, and oppose the use of their personal data.

Key provisions of the new laws include the establishment of a State Cybersecurity Agency, which will oversee the country’s policies enforcement, manage risks, and respond to cyber threats with substantial penalties for non-compliance.

The laws align El Salvador with international standards, boosting confidence in digital services and promoting foreign investment.

With this important milestone El Salvador is setting a strong foundation for digital growth and providing its citizens with the tools to protect their personal data in an increasingly interconnected world.

By focusing on both cybersecurity and data protection, El Salvador is taking a major step in securing its place as a leader in digital innovation and personal data rights.