Law / Bolivia

Constitución Política del Estado, Acción de Protección de Privacidad

CPE, art. 130 (Acción de Protección de Privacidad), promulgada 7 de febrero de 2009

In force since .

A data subject rights rule binding public and private bodies.

Obligation class
Data subject rights
Audit expectation
none

What it requires

  • Let a person know, object to, and obtain the deletion or rectification of personal data about them that your records or databases hold, when that data affects their right to personal or family privacy, image, honour, or reputation.NIST Privacy FrameworkCT.PO-P3
  • A court ordering disclosure, deletion, or rectification under this action must be obeyed immediately, without waiting on the automatic constitutional review.NIST Privacy FrameworkGV.PO-P5

These lines are LexLint's reading of the law's text.

In the frameworks

NIST Privacy Framework
  • GV.PO-P5Legal, regulatory, and contractual requirements regarding privacy are understood and managed.
  • CT.PO-P3Policies, processes, and procedures for enabling individuals’ data processing preferences and requests are established and in place.
FINOS AIGF

Our reading of where this law's duties sit in each framework, and in the NIST Privacy Framework, line by line beside each duty above. It never says that running a control meets the law. How we read a framework against the law

What it makes you log

Logging duty

Article 130 gives a person who believes they are unduly or unlawfully prevented from knowing, objecting to, or obtaining the deletion or rectification of data registered in public or private files or data banks a constitutional action, and says it does not lie to lift press confidentiality. It is a remedy for the data subject and states no duty on any holder of data to keep a log or record, no audit and no retention period. The article has no territorial hook of its own.

Kind
None
As of

What this law does

Drafted with AI

Drafted with AI from the cited sources under the direction of UnGovr staff. UnGovr holds editorial responsibility for this page. How this site is made

Research summary

Legal information, not legal advice. This is LexLint's own research summary of a public legal source, and it creates no attorney-client relationship. For decisions that matter, consult qualified counsel in the relevant jurisdiction. About LexLint

Article 130 lets any individual or collective person who believes they are unduly or illegally prevented from knowing, objecting to, or obtaining the deletion or rectification of data registered by any physical, electronic, magnetic, or computer-based medium, in public or private files or data banks, file the Acción de Protección de Privacidad where that data affects their fundamental right to personal or family privacy, image, honour, or reputation; the action does not lie to lift press confidentiality.

Article 131 routes the action through the same procedure as the Acción de Amparo Constitucional and lets the competent court order the disclosure, deletion, or rectification of the challenged data, with an automatic review before the Tribunal Constitucional Plurinacional.

When LexLint raises it

When your app profile says your app processes personal data.

Back to the example  ·  Lint your app

Page updated .