Processes biometric data, in El Salvador

Decreto Legislativo No. 144, arts. 4(g), 26, 37, 38, 39 and 42 (sensitive personal data and children) · Read the law's page

• Do not compel a person to provide sensitive personal data (data touching physical or moral characteristics, or facts of private life whose misuse could cause discrimination or gravely harm honor or privacy, including religious belief, ethnic origin, political or union affiliation, sexual preference, health, or biometric or genetic information); take it only with the data subject's express and unequivocal consent after telling them of their right to withhold it.
• Obtain a sensitive data subject's consent in writing, by an autograph signature or its equivalent, and apply the Progressive Exercise of Faculties principle to a child's consent to provide their personal data.
• Process health data, as a health establishment or professional, only for a patient under your care and only for prevention, diagnosis, treatment or health service management, under professional secrecy.
• Collect or process sensitive personal data only where this Law authorizes it, another statute authorizes it for a general interest, you have a legal mandate, or the purpose is statistical or scientific and the data have been dissociated from the data subject.
• Do not create a database of sensitive personal data in violation of this Law.
• Guarantee the best interests of a child or adolescent in any processing of their data, and inform both the child and their parent or guardian, in clear and age appropriate language, before exercising the child's rights.

Resolución No. 0001/2025, ANIA, art. 11 · Read the law's page

• If your AI system is the controlling factor in a decision that materially affects a person's legal status, rights, or access to essential goods, services or opportunities, and it operates in a registrable sector (primary health diagnosis or treatment, creditworthiness or insurance and loan decisions, real-time biometric identification in public spaces, the exercise of government authority or public benefits, unsupervised hiring or compensation decisions, or academic admission or grading), register with ANIA.
• You may demonstrate compliance through self-certification, third-party certification, or ANIA's supervised sandbox.