Constitución Política del Estado, Acción de Protección de Privacidad
CPE, art. 130 (Acción de Protección de Privacidad), promulgada 7 de febrero de 2009
In force since .
A data subject rights rule binding public and private bodies.
- Obligation class
- Data subject rights
- Audit expectation
- none
What it requires
- Let a person know, object to, and obtain the deletion or rectification of personal data about them that your records or databases hold, when that data affects their right to personal or family privacy, image, honour, or reputation.NIST Privacy FrameworkCT.PO-P3
- A court ordering disclosure, deletion, or rectification under this action must be obeyed immediately, without waiting on the automatic constitutional review.NIST Privacy FrameworkGV.PO-P5
These lines are LexLint's reading of the law's text.
In the frameworks
- NIST Privacy Framework
- FINOS AIGF
- AIR-PREV-006Data Quality & Classification/Sensitivity
- AIR-DET-021Agent Decision Audit and Explainability
Our reading of where this law's duties sit in each framework, and in the NIST Privacy Framework, line by line beside each duty above. It never says that running a control meets the law. How we read a framework against the law
What it makes you log
Logging duty
Article 130 gives a person who believes they are unduly or unlawfully prevented from knowing, objecting to, or obtaining the deletion or rectification of data registered in public or private files or data banks a constitutional action, and says it does not lie to lift press confidentiality. It is a remedy for the data subject and states no duty on any holder of data to keep a log or record, no audit and no retention period. The article has no territorial hook of its own.
- Kind
- None
- As of
What this law does
Article 130 lets any individual or collective person who believes they are unduly or illegally prevented from knowing, objecting to, or obtaining the deletion or rectification of data registered by any physical, electronic, magnetic, or computer-based medium, in public or private files or data banks, file the Acción de Protección de Privacidad where that data affects their fundamental right to personal or family privacy, image, honour, or reputation; the action does not lie to lift press confidentiality.
Article 131 routes the action through the same procedure as the Acción de Amparo Constitucional and lets the competent court order the disclosure, deletion, or rectification of the challenged data, with an automatic review before the Tribunal Constitucional Plurinacional.
When LexLint raises it
When your app profile says your app processes personal data.
Back to the example · Lint your app
Page updated .