Ley 81 de 2019, cross border transfer of personal data

Ley 81 de 2019, arts. 5 and 33 (cross border transfer of personal data)

A citation is an address, not a summary. The first part names the law; what follows narrows it to the exact section, article or paragraph.

What follows is LexLint's own research summary of this law, not legal advice.

In force since 29 March 2021.

A cross border transfer rule binding public and private bodies.

As of 19 September 2026.

What it requires

Before storing or transferring personal data domiciled in Panama across a border, confirm you meet this Law's data protection standards, or standards equal to or higher than them, unless the data subject consented, a contract requires it, it is a banking or securities transfer, or a ratified international treaty compels it.
Before an international transfer of personal data, confirm at least one lawful ground applies, among them the data subject's consent, an equivalent or superior protection level in the receiving country, a ratified treaty, medical necessity, transfer within the same corporate group, a contract, a public interest or legal defense need, judicial cooperation, a banking or securities transaction, international intelligence cooperation, a binding self-regulation mechanism, or contractual clauses meeting this Law's protections.
Remain responsible, as the party transferring or receiving personal data internationally, for the lawfulness of the processing you send or take in.

What it reaches

Obligation class

Transfer

What this law does

Drafted with AI from the cited sources under the direction of UnGovr staff. UnGovr holds editorial responsibility for this page.

Article 5 subjects a database located in Panama, or whose responsible party is domiciled there, to this Law, and permits storing or transferring confidential, sensitive or restricted data with cross border treatment only where the responsible party meets this Law's data protection standards or standards equal to or higher than it, unless the data subject consented, a contract requires the transfer, it is a banking, monetary or securities transfer, or an international treaty Panama has ratified compels it.

Article 33 makes an international transfer of personal data lawful if at least one of thirteen listed conditions is met, among them the data subject's consent, the receiving country or organization providing an equivalent or superior level of protection, a treaty or law to which Panama is party, medical necessity, transfer within the same corporate group, a contract in the data subject's unequivocal interest, a public interest or legal defense need, judicial cooperation, a banking or securities transaction, international intelligence cooperation against organized crime, a binding self-regulation mechanism, or contractual clauses that meet this Law's protections, and holds both the transferring party and the recipient responsible for the lawfulness of the processing transferred.

When LexLint raises it

crawls_web
trains_models
ships_mobile_app
distributes_software_product

Read the law

Official Legispan text of Ley 81 de 2019, Asamblea Nacional de Panamá

Every line above is drawn from the primary source linked here, read on the date shown. This is a research summary, not legal advice.

Back to the example · Lint your app