Ley General de Telecomunicaciones, Inviolabilidad y Secreto de las Comunicaciones y Protección de Datos Personales
Ley No. 164, arts. 56 (Protección de Datos Personales), promulgada 8 de agosto de 2011
In force since .
A comprehensive regime rule binding public and private bodies.
- Obligation class
- Security
- Audit expectation
- none
What it requires
- Guarantee the inviolability and secrecy of communications you carry as a telecommunications, network, or ICT service provider.NIST Privacy FrameworkPR.DS-P2
- Protect the personal data and privacy of your users, apart from what regulation permits in directories, invoices, and similar records.NIST Privacy FrameworkPR.DS-P5
These lines are LexLint's reading of the law's text.
In the frameworks
- NIST Privacy Framework
- FINOS AIGF
- AIR-PREV-007Legal and Contractual Frameworks for AI Systems
- AIR-PREV-008Quality of Service (QoS) and DDoS Prevention for AI Systems
- AIR-PREV-012Role-Based Access Control for AI Data
- AIR-PREV-014Encryption of AI Data at Rest
- AIR-PREV-017AI Firewall Implementation and Management
- AIR-PREV-020MCP Server Security Governance
1 more
- AIR-DET-001AI Data Leakage Prevention and Detection
Our reading of where this law's duties sit in each framework, and in the NIST Privacy Framework, line by line beside each duty above. It never says that running a control meets the law. How we read a framework against the law
What it makes you log
Logging duty
Article 56 requires operators of public networks and providers of telecommunications and information and communication technology services to guarantee the inviolability and secrecy of communications and the protection of users' personal data and privacy, except for matters in telephone directories, invoices and other matters set by rule. It states the guarantee in general terms and names no record, log, audit or retention duty. Article 57 is a rule that doubt between a user and a provider is resolved in the user's favor. Neither article has a territorial hook of its own.
- Kind
- None
- As of
What this law does
Article 56 requires operators of public networks and providers of telecommunications and information and communication technology services to guarantee the inviolability and secrecy of communications, and equally the protection of users' personal data and privacy, except what is contemplated in telephone directories, invoices, and other matters established by regulation.
Article 57 is an interpretation rule directing that, where doubt exists in applying sector regulation between a user and a provider, the rule favouring the user applies; it does not itself impose a data-security or organisational-measures duty.
When LexLint raises it
When your app profile says your app provides telecom services or processes personal data.
Back to the example · Lint your app
Page updated .