Bolivia still lacks a personal data law

Bolivia still does not have an active personal data protection law. The article "Te Conocen," published by Biodiversidadla.org, says there are two draft proposals, one prepared by the Government Electronic Technologies and Information and Communication Agency, or AGETIC, and another by the InternetBolivia.org Foundation, but neither has become law. It also notes that Bolivia has no specialized authority or office with powers to review the use of personal data or campaign segmentation practices.

What do the draft proposals say about personal data?

The two texts seek to set obligations for public and private entities on how personal information is handled. According to the article, they would have to disclose what data they hold, where it came from, and provide ways for people to request its deletion. Both proposals, however, remain drafts and do not show any known advanced legislative status.

What institutional gap does the report describe?

The report says that Bolivia currently has no specialized body with powers to review the use of personal data or campaign segmentation practices. That gap is directly tied, according to the same material, to the absence of an approved personal data protection law.

What happens with the CIPA law reference?

The reference to a CIPA law appears in the Bolivia Cibersegura initiative, mentioned in a Bolivia Emprende note about joint work by Entel, the ATT, and AGETIC. There, it is described as a proposed rule aimed at protecting minors in Internet access at schools, linked to the expansion of school connectivity.

That material does not say the text was formally introduced as a bill before Bolivia’s Plurinational Legislative Assembly. For that reason, the reference is presented as an initiative under development, not as an approved law.