Paraguay sets data fines, boosts oversight

Personal data penalties are tiered

Paraguay’s Law No. 7593/2025 establishes a tiered penalty regime for violations involving personal data. According to ABC Color, fines range from 20 to 2,500 minimum wage units for general offenses, rise to 5,000 wage units when sensitive data is involved, and can reach 10,000 wage units if children or teenagers are affected.

ABC Color also reported that enforcement and oversight of the law will fall to the new National Personal Data Protection Agency, which will operate under the Ministry of Information and Communication Technologies, or Mitic.

Full implementation is set for 2027, so the framework is expected to roll out gradually. In that context, the Paraguayan outlet said several companies have already begun preparing for the new regime. The steps cited include inventorying databases, reviewing contracts, updating privacy policies, strengthening cybersecurity controls, and training staff.

Bill seeks to regulate drones

At the same time, Paraguay’s Chamber of Deputies introduced a bill to establish a comprehensive legal framework for drone use, defined as Remotely Piloted Aircraft, or RPA, and Remotely Piloted Aircraft Systems, or RPAS, according to La Nación.

The proposal would require mandatory registration of these devices with the National Civil Aviation Directorate, Dinac, the Paraguayan Air Force, or Digemabel, depending on the type of aircraft and intended use. It also adds remote electronic identification, or Remote ID, to track their location in real time.

If approved, the bill would add a traceability scheme for drone operations, in line with the control requirements it sets for different aircraft categories.