Crawls the web, in Ecuador

Código Orgánico Integral Penal (COIP), art. 229 (revelación ilegal de base de datos) · Read the law's page

• Do not reveal information registered in a file, archive, database, or similar medium, obtained through or directed at a computer, telematic or telecommunications system, for your own or a third party's benefit, in a way that breaches a person's secrecy, privacy or intimacy.

Código Orgánico Integral Penal (COIP), art. 230 (interceptación ilegal de datos) · Read the law's page

• Do not intercept, listen to, divert, record, or observe a computer datum, signal, or data transmission without a prior judicial order and for the purpose of obtaining registered or available information.

Código Orgánico Integral Penal (COIP), art. 232 (ataque a la integridad de sistemas informáticos) · Read the law's page

• Do not destroy, damage, delete, deteriorate, alter, suspend, obstruct, or suppress computer data or an information system's logical components, and do not design, acquire, or distribute malicious software meant to do so.
• A heavier penalty applies where the target is infrastructure for a public service or linked to public safety.

Código Orgánico Integral Penal (COIP), art. 234 (acceso no consentido a un sistema informático) · Read the law's page

• Do not access, in whole or in part, a computer, telematic, or telecommunications system without authorization, or remain inside it against the will of the person with the legitimate right, to exploit the access, modify a web portal, divert data or voice traffic, or offer the system's services to third parties without paying the legitimate provider.
• Reading a public, unauthenticated page without defeating an access control has not itself been held to violate this article.

Art. 140, Código Ingenios (Código Orgánico de la Economía Social de los Conocimientos, Creatividad e Innovación), materia protegible por las bases de datos · Read the law's page

• A database's protection reaches only the originality of the selection or arrangement of its contents, not the underlying data itself, so scraping data out of a non-original or unoriginally-arranged database does not by itself infringe this article.

Arts. 211-212, Código Ingenios (Código Orgánico de la Economía Social de los Conocimientos, Creatividad e Innovación), uso justo y actos que no requieren autorización · Read the law's page

• A use falling within the article 212 list, including library, archive, or museum text mining of a work already in the collection, does not require the rights holder's authorization, provided it does not conflict with the work's normal exploitation or unjustifiably prejudice the rights holder.
• Text and data mining outside that library, archive, or museum context, such as mining text scraped from the open web for model training, is not covered by this exception and needs another lawful basis.

Resolución No. SPDP-SPD-2026-0009-R, Superintendencia de Protección de Datos Personales, 12 de febrero de 2026 · Read the law's page

• Guarantee the data subject's rights under the LOPDP, and access to the mechanisms for exercising them, where an AI system processes the data subject's personal data; a processor owes this only where it has access to, visibility of, or effective control over that data.
• Inform the data subject clearly, specifically, and transparently about personal-data processing carried out through an AI system, including its purposes.
• Before developing an AI system that will process personal data, carry out a risk-management process and, where applicable, an impact assessment.
• Maintain a record of processing activities and audit the AI system's operation in proportion to its level of risk.

Sandbox regulatorio de inteligencia artificial, Ministerio de Telecomunicaciones y de la Sociedad de la Información, announced 24 March 2026 under the Organic Law on Digital and Audiovisual Transformation (LOTDA) and the EFIA-EC strategy (Acuerdo MINTEL-MINTEL-2025-0030)