Processes personal data, in Bolivia

CPE, art. 130 (Acción de Protección de Privacidad), promulgada 7 de febrero de 2009 · Read the law's page

• Let a person know, object to, and obtain the deletion or rectification of personal data about them that your records or databases hold, when that data affects their right to personal or family privacy, image, honour, or reputation.
• A court ordering disclosure, deletion, or rectification under this action must be obeyed immediately, without waiting on the automatic constitutional review.

Ley No. 164, arts. 56 (Protección de Datos Personales), promulgada 8 de agosto de 2011 · Read the law's page

• Guarantee the inviolability and secrecy of communications you carry as a telecommunications, network, or ICT service provider.
• Protect the personal data and privacy of your users, apart from what regulation permits in directories, invoices, and similar records.

DS No. 1793, Reglamento a la Ley No. 164, art. 56 (Tratamiento de los Datos Personales), 13 de noviembre de 2013 · Read the law's page

• Obtain a person's prior knowledge and express consent before collecting, processing, blocking, cancelling, transferring, consulting, or interconnecting their personal data.
• Before asking someone for their personal data, tell them it will be processed, why, who may receive it, who is responsible for it and how to reach that party, and that they may exercise access, rectification, updating, cancellation, objection, and revocation rights.
• Do not use personal data for a purpose other than the one stated when it was collected.
• Do not use, communicate, or transfer personal data to a third party without the data subject's consent or a competent court's written order.
• Adopt technical and organisational measures, matched to the state of technology and the data's nature and risk, to keep personal data secure and prevent its alteration, loss, or unauthorised processing.

Anteproyecto de Ley de Protección de Datos Personales · Read the law's page

• Process a natural person's personal data lawfully, for a stated purpose, and with the security, transparency, and accountability the principles of AGETIC's draft Anteproyecto describe.
• Let a person exercise access, rectification, erasure, objection, processing-limitation, portability, and revocation rights over their personal data, and let them object to being subject to a fully automated decision.

Ley No. 3131 del Ejercicio Profesional Médico, arts. 3, 4, 12, 13 and 17 (Secreto Médico) · Read the law's page

• If you are a physician or run a clinical service in Bolivia, keep medical secrecy: all information identified during the medical act about a patient's state of health or illness, treatment and other personal information must stay secret, even after the patient's death and after you stop providing services (Ley 3131, Articles 3, 4 and 12).
• Reveal medical secrecy only where the patient or legal representative expressly authorizes it, where you act as a forensic physician at the request of a competent authority, for a notifiable disease, where the health of the family and community is at imminent risk, or where the law expressly provides (Ley 3131, Article 17).

Ley No. 3729 para la Prevención del VIH-SIDA, arts. 9 and 20 (Derecho a la Reserva; Resultados de las Pruebas) · Read the law's page

• Protect the identity and situation of people living with HIV-AIDS: if you are health personnel who learn a person's identity through your work, do not disclose it in any way, except as the medical and epidemiological protocols provide (Ley 3729, Article 9).
• Keep HIV-AIDS test results confidential and hold the person's identity under codes (Ley 3729, Article 20).
• If you run an accredited public or private medical center or laboratory that detects a case of HIV-AIDS, notify it confidentially to the National STD/HIV-AIDS Programme of the Ministry of Health and Sports (Ley 3729, Article 20).
• Do not publish in print or on television about a person living with HIV-AIDS without that person's express knowledge (Ley 3729, Article 9).

Ley No. 393 de Servicios Financieros, art. 477 (Acción de Protección de la Privacidad) · Read the law's page

• If you are a financial entity, let a person know, object to, and obtain the deletion or rectification of data you have registered about them in physical, electronic, magnetic or computer-based files and databases, which they may enforce through the Acción de Protección de la Privacidad (Ley 393, Article 477).

Ley No. 393 de Servicios Financieros, arts. 346, 348, 349 and 350 (Burós de Información) · Read the law's page

• If you run a credit information bureau (buró de información) authorized by Bolivia's financial supervisor ASFI, take effective security and control measures at all times to prevent improper use or handling of the information you hold (Ley 393, Article 350).
• Do not solicit, collect or provide information for purposes other than your bureau business, and do not collect information from sources the supervisor's rules do not permit (Ley 393, Article 348(c) and (d)).
• Do not improperly alter, change on your own initiative or delete records in databases that come from ASFI or other authorized sources, and do not transfer to third parties, free or for a price, the information you receive from ASFI, except what relates to supplying information within your purpose (Ley 393, Article 348(e) and (f)).
• Give ASFI unrestricted, free access to all the information you manage, through access to your systems or periodic reports (Ley 393, Article 349).