Is a bank, in Ecuador

LOPDP, arts. 25-32 (categorias especiales de datos personales) · Read the law's page

• Do not process personal data without a lawful basis under the Act, and obtain explicit consent before processing a sensitive category of data unless another enumerated ground applies.
• Treat the data of children and adolescents, health data and disability data as special categories alongside sensitive data.
• Do not process sensitive data at all unless the data subject has given explicit consent or one of the other grounds article 26 lists applies.
• Process health data only on the terms articles 30 to 32 set, and credit data only as articles 28 and 29 permit, respecting the credit data subject's own rights.