LexLint

Know the law your code answers to.

Law / Ecuador

LOPDP, control, infracciones, sanciones y la Autoridad

LOPDP, arts. 61-77 (control, infracciones, sanciones y la Autoridad)

A citation is an address, not a summary. The first part names the law; what follows narrows it to the exact section, article or paragraph.

What follows is LexLint's own research summary of this law, not legal advice.

In force since 26 May 2021.

An enforcement supervision rule binding public and private bodies.

As of 19 September 2026.

What it requires

  • Expect the Personal Data Protection Authority to exercise continuous control over your processing, to open preliminary actions and an administrative procedure, and to impose corrective measures.
  • Expect a data subject to be able to address a requirement to you directly under article 62, and the Authority to impose provisional or precautionary measures under article 74.
  • Expect the sanctions in articles 71 and 72 for the minor and grave infractions articles 67 to 70 list, calculated on the business turnover article 73 defines.

If you get it wrong

Private right of actionNo

Penalty structure

For a private-law entity, or a public enterprise, found to have committed a grave infraction: a fine of between 0.7% and 1% of business turnover for the immediately preceding fiscal year. A public servant whose act or omission caused the infraction is instead fined 10 to 20 unified basic salaries (salarios básicos unificados).

Rule
Turnover pct only
As of
5 September 2026
Turnover percentage cap
1

Who enforces it

Enforcement body

Superintendencia (Autoridad) de Protección de Datos Personales

What it reaches

Obligation class

Governance, Reporting

What this law does

Drafted with AI from the cited sources under the direction of UnGovr staff. UnGovr holds editorial responsibility for this page.

Article 61 gives the Personal Data Protection Authority continuous control, article 62 lets a data subject address it directly, articles 63 and 64 set the preliminary actions and the administrative procedure, and articles 65 and 66 the corrective measures and their application. Articles 67 to 70 list the minor and grave infractions of the controller and of the processor, articles 71 and 72 the sanctions for each, and article 73 defines the business turnover the sanctions regime is calculated on.

Article 74 provides for provisional or precautionary measures. Articles 75 to 77 establish the Personal Data Protection Authority and its functions, powers and head. The corrective-measures and sanctions regime, unlike the rest of the Act, did not begin to apply until two years after the Act's publication in the Official Registry. The law was published in Registro Oficial Suplemento 459 of 26 May 2021 and is recorded there as in force, which is the day these provisions began to bind.

When LexLint raises it

  • crawls_web
  • trains_models
  • deploys_chatbot
  • high_risk_decisions
  • is_listed_company

Read the law

Official text of the LOPDP as published by Ecuador's Ministerio de Inclusión Económica y Social (finanzaspopulares.gob.ec)

Every line above is drawn from the primary source linked here, read on the date shown. This is a research summary, not legal advice.

Back to the example  ·  Lint your app