UNITED NATIONS CONFERENCE ON TRADE AND DEVELOPMENT

Study on the harmonization of cyberlegislation in Latin America

UNITED NATIONS CONFERENCE ON TRADE AND DEVELOPMENT

Study on the harmonization of

cyberlegislation in Latin America

New York and Geneva, 2016 ii Study on the harmonization of cyberlegislation in Latin America

NOTE

6\PEROVRI8QLWHG1DWLRQVGRFXPHQWVDUHFRPSRVHGRIFDSLWDOOHWWHUVZLWKƄ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

81&7$''7/67,&7 81,7('1$7,21638%/,&$7,21 &RS\ULJKW†8QLWHG1DWLRQV $OOULJKWVUHVHUYHG $&.12:/('*(0(176 iii

ACKNOWLEDGEMENTS

7KLVVWXG\ZDVSUHSDUHGDVSDUWRIWKHZRUNRIWKH6FLHQFHDQG7HFKQRORJ\DQG,QIRUPDWLRQDQG&RPPXQLFDWLRQ 7HFKQRORJ\%UDQFKDQGWKH7UDLQ)RU7UDGH3URJUDPPHRIWKH'LYLVLRQRI7HFKQRORJ\DQG/RJLVWLFVRIWKH8QLWHG 1DWLRQV&RQIHUHQFHRQ7UDGHDQG'HYHORSPHQW 81&7$'  ,WZDVSUHSDUHGXQGHUWKHVXSHUYLVLRQRIWKH81&7$'WHDPFRPSULVHGRI*RQ]DOR$\DOD%RUGD&ÆFLOH%DUD\UH DQG0DUÊD/X]-DXUHJXLEHUU\7KHFKLHIFRQVXOWDQWLQFKDUJHRIGUDIWLQJWKHVWXG\ZDV0U-RUJH1DYDUUR,VOD:H DUHJUDWHIXOIRUWKHFRQWULEXWLRQVPDGHE\SDUWLFLSDQWVLQWKHWUDLQLQJFRXUVHRQWKHOHJDODVSHFWVRIHFRPPHUFH IRU /DWLQ $PHULFD DQG WKH &DULEEHDQ KHOG LQ -XQH  DQG LQ SDUWLFXODU SDUWLFLSDQWV LQ WKH UHJLRQDO ZRUN VKRSRQKDUPRQL]DWLRQRIF\EHUOHJLVODWLRQIRUHFRPPHUFHLQ/DWLQ$PHULFDDQGWKH&DULEEHDQZKLFKZDVKHOG LQ*XD\DTXLO(FXDGRULQ6HSWHPEHU$QDOÊD$VSLV$QJHOLTXH&RGG&DUORV)HUQDQGR(VFREDU5HYROOR 1LFRO¾V6FKXEHUW3DROD$QGUHD$UDQJR+HQDR6DORPÆ9HJD0RUHUD0DGHO\Q5RGUÊJXH]/DUD+HUQ¾Q*XV WDYR*RQ]¾OH]/ÐSH]6DORPÐQ(GXDUGR&XVWRGLR*RQ]¾OH]$UDFHO\$PD\D)DELDQ(OLGH*LQD7DVV\&KHUXELQ .DULQD(OL]DEHWK$TXLQR9DOOH3HWHU%DLOH\-RQDWKDQ/ÐSH]7RUUHV,GHOYLD0DUÊD&DPSRV8UELQD5DIDHO-HV×V 4XLQWHUR

FOREWORD

:LWKWKHHYROXWLRQRILQIRUPDWLRQDQGFRPPXQLFDWLRQVWHFKQRORJLHV ,&7V DQGLQSDUWLFXODUGHYHORSPHQWVLQWKH XVHRIPRELOHGHYLFHVDQGWKHGHYHORSPHQWRIFORXGFRPSXWLQJDQGELJGDWDVHFXULW\LVVXHVVXFKDVGDWDVH FXULW\F\EHUFULPHDQGFRQVXPHUSURWHFWLRQDUHHVVHQWLDOWRJDLQLQJWKHWUXVWRIXVHUVLQHFRPPHUFH7KHDFWRUV LQYROYHGLQGHVLJQLQJDQGLPSOHPHQWLQJSXEOLFSROLFLHVDUHIDFHGZLWKFKDOOHQJHVUHODWLQJWROHJLVODWLRQWHFKQLFDO and administrative matters, implementation and harmonization peculiar to the dynamics of their own countries DQGRIWKHUHJLRQDVDZKROH 7KHSXUSRVHRIWKLVSXEOLFDWLRQLVWRSURYLGHXSWRGDWHLQIRUPDWLRQRQWKHOHJDOIUDPHZRUNRIWKHFRXQWULHVLQWKH UHJLRQDVIROORZXSWRWKHVWXGLHVRQSURVSHFWVIRUKDUPRQL]LQJF\EHUOHJLVODWLRQLQ/DWLQ$PHULFDDQGLQ&HQWUDO $PHULFDDQGWKH&DULEEHDQWKDWZHUHSXEOLVKHGLQDQG7KLVVWXG\UHSRUWVRQSURJUHVVPDGHE\WKH FRXQWULHVLQUHJDUGWRHOHFWURQLFWUDQVDFWLRQVHOHFWURQLFVLJQDWXUHVRQOLQHSURWHFWLRQRIFRQVXPHUVSURWHFWLRQ of personal data, industrial and intellectual property, domain names, cybercrime and security of information, and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v

CONTENTS

FOREWORD ...... iv

I. INTRODUCTION ...... 1

A. STATUS OF CYBERLEGISLATION IN THE LATIN AMERICAN COUNTRIES ...... 2 B. A MULTIPLICITY OF INITIATIVES FOR PROMOTING INTERNATIONAL COMMERCIAL TRANSACTIONS IN THE REGION ...... 6

II. REPORT ON LEGISLATION IN THE LATIN AMERICAN COUNTRIES ...... 11

ARGENTINA ...... 11 BOLIVIA ...... 13 BRAZIL ...... 16 CHILE ...... 19 COLOMBIA ...... 22 ...... 24 CUBA ...... 26 DOMINICAN REPUBLIC ...... 28 ECUADOR ...... 31 EL SALVADOR ...... 34 ...... 38 HAITI ...... 40 ...... 41 MEXICO ...... 44 ...... 46 PANAMA ...... 49 PARAGUAY ...... 52 PERU ...... 55 URUGUAY ...... 58 VENEZUELA ...... 61 vi Study on the harmonization of cyberlegislation in Latin America I. INTRODUCTION 1

I. INTRODUCTION

7KHUHIRUPRIF\EHUOHJLVODWLRQLVNH\WRVWUHQJWK WKHJOREDOVWDQGSRLQWWKHUHJLRQVWLOOSOD\VDPLQRU HQLQJ WKH HFRQRPLF GHYHORSPHQW RI LQGLYLGXDO UROH FRXQWULHV DQG RI WKH UHJLRQ DV D ZKROH ,W DOVR $V VKRZQ LQ WDEOH  WKH 8QLWHG 1DWLRQV &RQIHU KHOSVWRSURPRWHQDWLRQDODQGFURVVERUGHUWUDGH HQFH RQ 7UDGHDQG 'HYHORSPHQW 81&7$'  %& LQFOXGLQJIRUDJHQFLHVDWWKHGLIIHUHQWOHYHOVRIJRY H&RPPHUFH,QGH[ZKLFKUHIOHFWVWKHXQGHUO\LQJ ernment, as well as for corporations and individual FDSDFLW\ RI FRXQWULHV WR FDUU\ RXW %& HFRP HQWUHSUHQHXUVFRQVXPHUVDQGFLWL]HQV PHUFH&KLOH8UXJXD\DQG%UD]LOUDQNDWWKHWRSRI ,Q/DWLQ$PHULFDEXVLQHVVWRFRQVXPHU %& H WKHUHJLRQZLWK&KLOHLQILUVWSODFHIRU/DWLQ$PHU commerce has increased over the last decade, LFDDQGWKLUW\QLQWKZRUOGZLGH IURP 86  ELOOLRQ WR 86  ELOOLRQ \HW IURP

Table 1. UNCTAD B2C e-Commerce Index 2015 Share of popula- Share of individu- Share of individu- tion having mail Secure servers per UNCTAD e- als with credit als using Internet Economy delivered at 1million people Commerce Index Rank cards (15+, 2011, (2013 or latest, per home (2012 or (normalized, 2013) value per cent) cent) latest, per cent) Chile 94 22.8 61.4 73.9 63.0 39 Uruguay 93 27.1 58.0 72.1 62.5 40

Brazil 81 29.2 58.0 69.9 59.5 47 Argentina 93 21.9 54.1 67.6 59.1 48 Costa Rica 98 12.2 47.5 72.5 57.6 52 Dominican 99 12.2 45.0 61.5 54.5 57 Republic Mexico 91 13.0 43.5 63.7 52.8 60 Bolivarian 93 10.4 44.1 56.6 51.0 63 Republic of Venezuela Colombia 60 10.2 51.27 65.6 46.9 71 El Salvador 95 5.3 25.5 60.9 46.7 72 Ecuador 68 10.2 35.1 63.0 44.1 76 Guatemala 95 6.9 16.0 58.1 44.0 77 Peru 56 10.0 38.2 61.9 41.5 82 Panama 25 10.7 45.2 73.5 38.6 84 Honduras 75 5.3 18.1 55.1 38.4 85 Nicaragua 44 2.5 13.5 54.4 28.6 98 Plurinational 19 4.1 34.2 54.9 28.1 99 State of Bolivia Haiti 40 1.8 9.8 37.7 22.3 107 Source: 81&7$'

&\EHUOHJLVODWLRQ IRVWHUV WKH FRQGLWLRQV QHFHV F\EHUOHJLVODWLRQRQHFRPPHUFHLWLVDOVRWUXHWKDW sary to achieve a secure and reliable environment WKHUHJLRQDVDZKROHKDVQRWJLYHQSULRULW\WRWKDW characterized by transparency, respect for pri HIIRUWDVDUHVXOWWKHUHDUHGLVSDULWLHVLQWKHOHJLV YDF\ SURWHFWLRQ RI GDWD OHJDO VHFXULW\ IUHHGRP ODWLYHGHYHORSPHQWRIGLIIHUHQWFRXQWULHV RIH[SUHVVLRQDQGIUHHGRPRIFRQVXPSWLRQDQGRI 7KLV SXEOLFDWLRQ ZDV XQGHUWDNHQ WR XSGDWH WKH HQWHUSULVH:KLOHLWLVWUXHWKDWWKHGLIIHUHQWFRXQ SUHYLRXV VWXGLHV RQ SURVSHFWV IRU KDUPRQL]LQJ WULHVRIWKHUHJLRQKDYHXQGHUWDNHQUHIRUPVLQWKHLU

 81&7$',QIRUPDWLRQ(FRQRP\5HSRUW7KH,QGH[LQ FOXGHVLQIRUPDWLRQRQFRXQWULHVLWKDVQRLQIRUPDWLRQ  H0DUNHWHU RQ&XED 2 Study on the harmonization of cyberlegislation in Latin America

F\EHUOHJLVODWLRQ LQ /DWLQ $PHULFD   and in IHUHQW WUDLQLQJ SURJUDPPHV RIIHUHG E\ 81&7$' &HQWUDO $PHULFD DQG WKH &DULEEHDQ in the fol IURPWR ORZLQJ FDWHJRULHV D  HOHFWURQLF WUDQVDFWLRQV %RWKVWXGLHVKLJKOLJKWWKHH[LVWHQFHRIPDQ\GLIIHU  HOHFWURQLFVLJQDWXUHV  E FRQVXPHUSURWHFWLRQ F  HQWLQWHUQDWLRQDORUJDQL]DWLRQV PXOWLODWHUDODVZHOO SURWHFWLRQRISHUVRQDOGDWD G LQGXVWULDODQGLQWHO DVUHJLRQDODQGVXEUHJLRQDO WKDWKDYHJHQHUDWHG OHFWXDOSURSHUW\ H GRPDLQQDPHV I F\EHUFULPH DEURDGUDQJHRIOHJLVODWLYHLQVWUXPHQWVDQGSXE and information security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

Table 2. Status of cyberlegislation in the countries of Latin America, 20157 Electronic Cybercrime and transactions/ Consumer Protection of Intellectual Domain Country information electronic protection personal data property names security signatures Argentina Plurinational State of Bolivia Brazil Chile Colombia Costa Rica Cuba Ecuador El Salvador Guatemala Haiti Honduras Mexico Nicaragua Panama Paraguay Peru Dominican Republic Uruguay Bolivarian Republic of Venezuela Source: 81&7$'

 6HHKWWSXQFWDGRUJHVGRFVZHEGWONWFGBVSSGI A. STATUS OF CYBERLEGISLATION  6HHKWWSXQFWDGRUJHVGRFVGWOVWLFWBVSSGI IN THE LATIN AMERICAN  ,QRUGHUWRVLPSOLI\WKHSUHVHQWDWLRQRIUHVXOWVWKHFDWHJRU\ RI qHOHFWURQLF WUDQVDFWLRQVHOHFWURQLF VLJQDWXUHVr LQFOXGHV COUNTRIES WKH IROORZLQJ FDWHJRULHV IURP SUHYLRXV VWXGLHV qHOHFWURQLF WUDQVDFWLRQVr qHOHFWURQLF VLJQDWXUHVr DQG qWD[HV DQG FXV 7DEOH  VKRZV WKH SURJUHVV PDGH LQ WKH FRXQWULHV WRPVr RI WKH UHJLRQ WKURXJK WKH UHJXODWRU\ IUDPHZRUN GH  %HDULQJLQPLQGWKHLPSRUWDQFHRIWKHLVVXHWKHFDWHJRU\ qLQIRUPDWLRQVHFXULW\rZDVDGGHGWRWKHFDWHJRU\RQqF\EHU FULPHrWKXVWKHWZRFRQFHSWVDUHQRZLQFOXGHGLQDVLQJOH  7DEOHGRHVQRWLQFOXGHSHQGLQJOHJLVODWLRQRUGUDIWELOOVDQG FDWHJRU\qF\EHUFULPHDQGVHFXULW\RILQIRUPDWLRQr RUUHJXODWLRQV II. REPORT ON LEGISLATION IN THE LATIN AMERICAN COUNTRIES 3

Normative Values:

Value Item Description Facilitates e-commerce The legislation is in line with international best practices adopted by international organizations, such as the United Nations Commission for International Trade Law, the World Intellectual Property Organization, the World Trade Organization, the International Telecommunications Union, the Ibero-American Data Protection Network, the Inter-American Committee against Terrorism of the Organization of American States, the Council of Europe and the Organization for Economic Cooperation and Development. Partially facilitates e-commerce There is some legislation on the subject, but it is not consistent with international best practices. It needs to be brought in line with normative standards. There is no legislation

VFULEHGODWHURQ7KHPRVWQRWDEOHSURJUHVVKDVEHHQ WXUHV DQG DGYDQFHG HOHFWURQLF VLJQDWXUHV ZLWKLQ PDGHSULPDULO\LQWKHDUHDVRIHOHFWURQLFWUDQVDFWLRQV WKH0(5&2685UHJLRQ5HVROXWLRQSURYLGHV HOHFWURQLF VLJQDWXUHV DQG RI SURWHFWLRQ RI SHUVRQDO JXLGHOLQHV IRU PXWXDO UHFRJQLWLRQ DJUHHPHQWV RQ GDWD3URJUHVVKDVEHHQVORZHULQWKHDUHDVRIF\EHU DGYDQFHG HOHFWURQLF VLJQDWXUHV ZLWKLQ 0(5&2 FULPHDQGLQIRUPDWLRQVHFXULW\DQGWRDOHVVHUH[WHQW 685 7KHVH UHVROXWLRQV KDYH PDGH LW SRVVLEOH IRU LQUHJDUGWRGRPDLQQDPHVDQGFRQVXPHUSURWHFWLRQ electronic customs transactions to be carried out in $UJHQWLQD%UD]LO3DUDJXD\8UXJXD\9HQH]XHODDQG ELECTRONIC TRANSACTIONS/ELECTRONIC %ROLYLD 6LPLODUO\ SXUVXDQW WR GHFLVLRQ  RQ WKH SIGNATURES FXVWRPVYDOXHRIJRRGVLQWURGXFHGLQWRWKHFXVWRPV WHUULWRU\RIWKH$QGHDQ&RPPXQLW\%ROLYLD&RORP 0RVWFRXQWULHVLQWKHUHJLRQKDYHDGRSWHGVWDQGDUGV ELD (FXDGRU DQG 3HUX KDYH SURPRWHG WKH XVH RI IRU HOHFWURQLF WUDQVDFWLRQVHOHFWURQLF VLJQDWXUHV GLJLWDOVLJQDWXUHVLQHOHFWURQLFFXVWRPVGHFODUDWLRQV 1LQHWHHQ FRXQWULHV DOUHDG\ KDYH OHJLVODWLRQ RQ WKH LQWKHPHPEHUFRXQWULHV PDWWHUDQGKDYHLQFRUSRUDWHGSURYLVLRQVWKDWDUH FRQVLVWHQWZLWKWKH0RGHO/DZRQ(OHFWURQLF&RP CONSUMER PROTECTION PHUFHDQGWKH0RGHO/DZRQ(OHFWURQLF6LJQDWXUHV (LJKWHHQ FRXQWULHV KDYH HQDFWHG OHJLVODWLRQ RQ DGRSWHGE\WKH8QLWHG1DWLRQV&RPPLVVLRQIRU,QWHU FRQVXPHU SURWHFWLRQ  RI WKRVH FRXQWULHV KDYH QDWLRQDO7UDGH/DZ 81&,75$/ 7KUHHFRXQWULHVGR LPSOHPHQWHG8QLWHG1DWLRQV*HQHUDO$VVHPEO\UHVR not apply the model laws, and one country has no OXWLRQRQJXLGHOLQHVIRUFRQVXPHUSURWHFWLRQ OHJLVODWLRQRQWKHPDWWHU ZKLOHWZRRIWKHPKDYHQRODZVRQWKHVXEMHFWQRUKDV 8QGHUWKH$/$','LJLWDO&HUWLƄFDWHRI2ULJLQSURMHFW DQ\VXFKOHJLVODWLRQEHHQSURSRVHG $UJHQWLQD%ROLYLD%UD]LO&KLOH&XED&RORPELD(F 0(5&2685 UHVROXWLRQ  RQ FRQVXPHUVp ULJKW XDGRU 0H[LFR 3DQDPD 3DUDJXD\ 3HUX 8UXJXD\ to information in commercial transactions made over DQG9HQH]XHODKDYHPDGHFRQVLGHUDEOHSURJUHVVLQ WKH,QWHUQHWUHVROXWLRQRQFRQVXPHUSURWHFWLRQ WKH PDQDJHPHQW RI GLJLWDO FHUWLƄFDWHV RI RULJLQ IRU DQGGHFHSWLYHDGYHUWLVLQJGHFUHH1RRQWKH FURVVERUGHUWUDGH 6DQWD0DUÊD3URWRFRODQGUHVROXWLRQRQLQWHU QDWLRQDOMXULVGLFWLRQLQPDWWHUVRIFRQVXPHUUHODWLRQV &RVWD 5LFD WKH 'RPLQLFDQ 5HSXEOLF (O 6DOYDGRU KDYH IDFLOLWDWHG WKH KDUPRQL]DWLRQ RI OHJLVODWLRQ RQ *XDWHPDOD+RQGXUDV1LFDUDJXDDQG3DQDPDKDYH WKHVHPDWWHUVLQ$UJHQWLQD%UD]LO3DUDJXD\8UXJXD\ PDGH VLJQLƄFDQW SURJUHVV DW WKH VXEUHJLRQDO OHYHO 9HQH]XHODDQG%ROLYLD ZLWKLPSOHPHQWDWLRQRIWKH8QLƄHG&HQWUDO$PHULFDQ &XVWRPV&RGH &$8&$ DQGWKHUHJXODWLRQVWKHUHWR ,Q WKH DUHD RI VHOIUHJXODWLRQ D QXPEHU RI QDWLRQDO DV ZHOO DV WKURXJK WKH VLJQLQJ RI WKH 'RPLQLFDQ associations and chambers of commerce have de 5HSXEOLF&HQWUDO$PHULFD8QLWHG6WDWHV)UHH7UDGH YHORSHGFRGHVRIFRQGXFWDQGVHDORIWUXVWVFKHPHV $JUHHPHQW &$)7$'5  IRUHFRPPHUFH VHHER[ 7KHSDUWLFLSDWLRQRIWKH &HQWUDO$PHULFDQFRXQWULHVLQWKH&$)7$'5$JUHH $VUHJDUGVWKH6RXWKHUQ&RPPRQ0DUNHW 0(5&2 PHQWDQGWKH8QLWHG6WDWHV3DQDPD7UDGH3URPRWLRQ 685 LWVUHVROXWLRQ1RUHFRJQL]HVWKHOHJDO $JUHHPHQW KDYH PDGH LW SRVVLEOH WR HQFRXUDJH WKH YDOLGLW\ RI HOHFWURQLF GRFXPHQWV HOHFWURQLF VLJQD DGRSWLRQRIWKLVW\SHRIPHFKDQLVPV 4 Study on the harmonization of cyberlegislation in Latin America

%R[ 7KHH&RQƂDQ]DDQGH5HVROXFLÐQLQLWLDWLYHVRIWKHH&RPPHUFH/DWLQ$PHULFDQ,QVWLWXWH

7KHH&RQƄ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ƄDQ]D6HDORI7UXVWDQGWKH0H[LFDQ,QWHUQHW$VVRFLDWLRQ6HDORI7UXVWSDUWLFLSDWHLQWKH :RUOG7UXVWPDUN$OOLDQFHZKLFKLVFRPSULVHGRIVHDORIWUXVWVFKHPHVLQ$VLDQFRXQWULHV(XURSHDQ FRXQWULHVDQG75867HLQWKH8QLWHG6WDWHV 7KURXJKLWVH5HVROXFLÐQLQLWLDWLYHH,QVWLWXWRLVGHYHORSLQJDSLORWSURJUDPPHRQRQOLQHGLVSXWHUHVROX WLRQLQH&RQƄDQ]D IRUGLVSXWHVDULVLQJIURPHFRPPHUFHDQGHEXVLQHVV XQGHUZKLFKH&RQƄDQ]DZRXOG VHUYHDVDQHXWUDORQOLQHWKLUGSDUW\7KHLGHDLVWRHQFRXUDJHSRVLWLYHRQOLQHH[SHULHQFHVVRDVWRDOORZ IRUWKHJURZWKDQGVWUHQJWKHQLQJRIWKHGLJLWDOHFRQRP\LQWKHUHJLRQ

SourceH,QVWLWXWR, 

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ƄF (FR DUHJLPHIRUH[FOXGLQJSURYLGHUVRILQWHUPHGLDWLRQVHU QRPLF &RRSHUDWLRQ $3(&  'DWD 3ULYDF\ 3DWKƄQGHU YLFHVGDWDVWRUDJHOLQNVDQGWHPSRUDU\FRSLHVIURP SURMHFW OLDELOLW\ 7KH%HLMLQJ7UHDW\RQ$XGLRYLVXDO3HUIRUPDQFHV   PROTECTION OF PERSONAL DATA DGPLQLVWHUHG E\ :,32 represents one of the most 0RVW FRXQWULHV KDYH DGRSWHG ODZV RQ SURWHFWLRQ RI VLJQLƄ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Ƅ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ƄUVW WLPH LQ WKH QRWKDYHDQ\OHJLVODWLRQRQWKHPDWWHU UHJLRQ LQFOXGHV qVDIH KDUERXUr SURYLVLRQV VROHO\ IRU 7KH GLVSXWHVHWWOHPHQW SURFHGXUHV DSSOLHG E\ WKH FRS\ULJKWLVVXHV7KH$FWSURYLGHVIRUDqQRWLFHDQG +DLWLDQ1HWZRUN,QIRUPDWLRQ&HQWUH 1,& GRQRWIROORZ WDNHGRZQr SURFHGXUH DQG LQFOXGHV D VHFWLRQ RXWOLQ LQJWKHVXPPDU\MXGLFLDOSURFHHGLQJVWREHIROORZHG  6HH KWWSZZZZLSRLQWWUHDWLHVHQWH[WMVS"ƄOHB  6HHKWWSZZZHLQVWLWXWRRUJVLWHLQLFLDWLYDVHUHVROXFLRQ LG  II. REPORT ON LEGISLATION IN THE LATIN AMERICAN COUNTRIES 5

WKH ,&$11 8QLIRUP 'RPDLQ1DPH 'LVSXWH5HVROX SODQVRIDFWLRQRIWKH6RXWK$PHULFDQ'HIHQVH&RXQ WLRQ3ROLF\ FLO 7KXV LW KDV VHW XS D ZRUNLQJ JURXS WR DVVHVV &RRUGLQDWLRQ RI WKH UHJLRQpV ,QWHUQHW UHJLVWUDWLRQ WKH IHDVLELOLW\ RI HVWDEOLVKLQJ UHJLRQDO SROLFLHV DQG DXWKRULWLHVE\WKH/DWLQ$PHULFDQDQG&DULEEHDQ$G PHFKDQLVPVIRUGHDOLQJZLWKF\EHUWKUHDWVLQWKHƄ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pV DUELWUDWLRQ SURFHGXUH ,Q 3HUX WKH &\EHU the parties in connection with the adoption of meas WULEXQDO VHUYHV DV WKH RIƄFLDO DUELWUDWLRQ YHQXH 1,& XUHV IRU XQGHUZULWLQJ DQG REWDLQLQJ HYLGHQFH LQ WKH 3DUDJXD\GHDOVZLWKGRPDLQQDPHGLVSXWHVWKURXJK ƄJKWDJDLQVWF\EHUFULPH7KH&RQIHUHQFHDOVRLVVXHG H[WUDMXGLFLDOPHFKDQLVPVXQGHU$FW1RRQ DUHFRPPHQGDWLRQRQWKHGHƄQLWLRQDQGSXQLVKPHQW DUELWUDWLRQDQGPHGLDWLRQ RI F\EHUFULPH 7KHVH LQVWUXPHQWV KDYH EHHQ VLJQHG ,Q DGGLWLRQ WKH &$)7$'5 $JUHHPHQW UHTXLUHV LWV E\0H[LFR*XDWHPDOD1LFDUDJXD3RUWXJDO3HUXDQG member countries to create mechanisms for combat 8UXJXD\DVZHOODVE\$UJHQWLQD LQJ F\EHUSLUDF\ E\ LPSOHPHQWLQJ SURFHGXUHV EDVHG The aforementioned instruments represent the most RQWKHSULQFLSOHVRIWKH,&$118QLIRUP'RPDLQ1DPH LPSRUWDQWDGYDQFHVPDGHE\WKHUHJLRQLQDGGUHVV 'LVSXWH5HVROXWLRQ3ROLF\7KHGLVSXWHUHVROXWLRQSUR LQJ WKH LVVXH RI F\EHUFULPH &RQVLGHULQJ WKDW WKH FHGXUHVXVHGE\WKH1,&VRI&RVWD5LFD(O6DOYDGRU +RQGXUDVDQGWKH'RPLQLFDQ5HSXEOLFGLYHUJHIURP FULPLQDO OHJLVODWLRQ RI WKH ,EHUR$PHULFDQ FRXQWULHV WKH ,&$11 8QLIRUP 'RPDLQ1DPH 'LVSXWH5HVR KDVVHULRXVVKRUWFRPLQJVLQWHUPVRIWKHGHƄQLWLRQRI OXWLRQ 3ROLF\ 7KLV FRXOG KLQGHU WKH GHYHORSPHQW RI F\EHUFULPHVDQGWKDWWKLVPDNHVLWSRVVLEOHIRUERWK FURVVERUGHUEXVLQHVVLQWKHUHJLRQ LQGLYLGXDO DQG RUJDQL]HG FULPLQDOV WR KDUP RU VHUL RXVO\MHRSDUGL]HHVVHQWLDOMXULGLFDOJRRGVDQGGHVLULQJ CYBERCRIME WRHVWDEOLVKPLQLPXPFRPPRQFULWHULDIRUSUHYHQWLQJ DQG FRPEDWWLQJ F\EHUFULPH ZLWKRXW GLPLQLVKLQJ WKH 2Q WKH PDWWHU RI F\EHUFULPH WZR FRXQWULHV KDYH LPSRUWDQFH RI WKH DGYDQFHV PDGH LQ WKH FRXQWULHVp VLJQHG WKH &RXQFLO RI (XURSHpV &RQYHQWLRQ RQ &\ OHJDOIUDPHZRUNVDQGWKHLQWHUQDWLRQDOFRPPLWPHQWV bercrime and have amended their substantive and RI LQGLYLGXDO 6WDWHV WKH &RQIHUHQFH RI 0LQLVWHUV RI SURFHGXUDOOHJLVODWLRQWREULQJLWLQOLQHZLWKWKH&RQ -XVWLFH RI WKH ,EHUR$PHULFDQ &RXQWULHV KDYH UHF YHQWLRQ 6HYHQWHHQ FRXQWULHV KDYH SDVVHG ODZV RPPHQGHG WKH KDUPRQL]DWLRQ ZLWKLQ WKH FRQWH[W RI GHƄQLQJFHUWDLQF\EHUFULPHVZKLOHRQHFRXQWU\KDVQR their national policies, of the substantive criminal laws VXFK OHJLVODWLRQ :LWK UHJDUG WR LQIRUPDWLRQ VHFXULW\ GHƄQLQJWKHEHKDYLRXUVGHVFULEHGEHORZZLWKDYLHZ FRXQWULHVKDYHVHWXSFRPSXWHUVHFXULW\LQFLGHQW response teams and have adopted the recommenda WLRQV RI WKH 2UJDQL]DWLRQ RI $PHULFDQ 6WDWHV 2$6   6HHWKH$FWLRQ3ODQRIWKH6RXWK$PHULFDQ'HIHQVH ,QWHU$PHULFDQ&RPPLWWHHDJDLQVW7HUURULVP &RXQFLO KWWSZZZFHHGFGVRUJDU(QJOLVK'RZQ ORDGV(QJ3$(1*3ODQGH$FFLRQSGI WKH $FWLRQ $W WKH VXEUHJLRQDO OHYHO WKH 8QLRQ RI 6RXWK $PHUL 3ODQRIWKH6RXWK$PHULFDQ'HIHQVH&RXQFLOKWWS  ZZZFHHGFGVRUJDU(QJOLVK'RZQORDGV(QJ3$(1* FDQ1DWLRQV 81$685 KDVEHHQZRUNLQJRQDQQXDO 3ODQGH$FFLRQSGIDQGWKH$FWLRQ3ODQRIWKH 6RXWK$PHULFDQ'HIHQVH&RXQFLOKWWSZZZFHHGFGVRUJ DU(QJOLVK'RZQORDGV(QJ3$(1*3ODQGH$FFLRQ  KWWSZZZRDVRUJHQVPVFLFWHGRFXPHQWVDVS 3ODQGH$FFLRQSGI  81$685LVDQLQWHUQDWLRQDORUJDQL]DWLRQPDGHXSRIWKH  7KH &RQIHUHQFH RI 0LQLVWHUV RI -XVWLFH RI ,EHUR$PHULFDQ FRXQWULHVRIWKH6RXWK$PHULFDQUHJLRQQDPHO\$UJHQWLQD &RXQWULHVLVFRPSULVHGRIWKHPLQLVWULHVRIMXVWLFHDQGVLPL %ROLYLD%UD]LO&RORPELD&KLOH(FXDGRU*X\DQD3DUDJXD\ ODULQVWLWXWLRQVRI$UJHQWLQD%ROLYLD%UD]LO&KLOH&RORPELD 3HUX6XULQDPH8UXJXD\DQG9HQH]XHOD7KHREMHFWLYHRI &RVWD5LFD&XED'RPLQLFDQ5HSXEOLF(FXDGRU(O6DOYD 81$685LVWRGHYHORSRSSRUWXQLWLHVIRULQWHJUDWLRQLQWKH GRU *XDWHPDOD +RQGXUDV 0H[LFR 1LFDUDJXD 3DQDPD cultural, economic, social and political spheres while re 3DUDJXD\3HUX 3RUWXJDO 6SDLQ 8UXJXD\ DQG 9HQH]XHOD VSHFWLQJWKHVSHFLƄFFLUFXPVWDQFHVRIHDFKFRXQWU\ 6HHKWWSZZZFRPMLERUJGRFXPHQWRV 6 Study on the harmonization of cyberlegislation in Latin America

WR DFKLHYLQJ JUHDWHU HIIHFWLYHQHVV LQ WKH SUHYHQWLRQ DFWLRQVEDVHGRQWKHXVHRIDSXEOLFNH\LQIUDVWUXFWXUH prosecution and punishment of those behaviours so DQGGLJLWDOFHUWLƄFDWHVWRIRVWHUWKHLQWHURSHUDELOLW\RI DVWRIDFLOLWDWHMXGLFLDOFRRSHUDWLRQDPRQJWKHGLIIHUHQW SODWIRUPVLQDVHFXUHFRQWH[WLQFOXGLQJWKURXJKFORXG FRXQWULHVDQGWU\WRSUHYHQWWKHH[LVWHQFHRIRSSRUWX WHFKQRORJ\DQGSURYLGHHFRQRPLHVRIVFDOH QLWLHVIRULPSXQLW\7KH$JUHHPHQWLVFRPSDWLEOHZLWK other international instruments such as the Council of %RWKWKHVWXG\RQSURVSHFWVIRUKDUPRQL]LQJF\EHU (XURSHpV&RQYHQWLRQRQ&\EHUFULPH OHJLVODWLRQ LQ /DWLQ $PHULFD   DQG WKH VWXG\ RQ SURVSHFWVIRUKDUPRQL]LQJF\EHUOHJLVODWLRQLQ&HQWUDO 6SHFLDO PHQWLRQ VKRXOG EH PDGH RI 6SHFLDO 'HF $PHULFDDQGWKH&DULEEHDQ  VWUHVVWKHLPSRU ODUDWLRQ  2Q ,QWHUQHW *RYHUQDQFH which was WDQFHRIWKH5HJLRQDO$FWLRQ3ODQIRUWKH,QIRUPDWLRQ adopted at the Third Summit of the Community of 6RFLHW\LQ/DWLQ$PHULFDDQGWKH&DULEEHDQLQ /DWLQ$PHULFDQDQG&DULEEHDQ6WDWHVKHOGLQ%HOÆQ DQG H/$&DQGH/$& ZKLFKUHS &RVWD5LFDLQ-DQXDU\,QWKDWWH[WWKH+HDGVRI UHVHQWVRPHRIWKHPRVWVLJQLƄ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obedience to the rules of international law, in relation RI GLJLWDO VLJQDWXUH DQG FHUWLƄFDWLRQ PHFKDQLVPV DV WR UHVSHFW IRU 6WDWH VRYHUHLJQW\ DQG KXPDQ ULJKWV ZHOODVLPSOHPHQWDWLRQRIWKHVLQJOHZLQGRZFRQFHSW HVSHFLDOO\ SULYDF\ DQG LLL  WR SURPRWH DFWLRQV DQG These measures have proved to be compatible across VWUDWHJLHVWRVWUHQJWKHQF\EHUVHFXULW\DQGSUHYHQWF\ the different divisions of individual states or of different bercrime, and in particular, create mechanisms for the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payment mechanisms and personal data protection, 0H[LFR1LFDUDJXD3DQDPD3DUDJXD\3HUX6W.LWWVDQG DQGSURYLGLQJOHJDOFHUWDLQW\WRSURPRWHLQYHVWPHQWLQ 1HYLV6W/XFLD6W9LQFHQWDQGWKH*UHQDGLQHV6XULQDP 7ULQLGDG DQG 7REDJR 8UXJXD\ DQG 9HQH]XHOD 6RXUFH WKHGLJLWDOHFRV\VWHP KWWSZZZFHODFLQWHUQDWLRQDORUJ  2SHUDWLYHSDUDJUDSKRI6SHFLDO'HFODUDWLRQ2Q,QWHU ,QLWLDWLYHV IRU LQWHUQDWLRQDO FRPPHUFLDO WUDQVDFWLRQV QHW*RYHUQDQFH LQ WKH UHJLRQ LQFOXGH WKH $/$', SURMHFW RQ D GLJLWDO  2SHUDWLYHSDUDJUDSKRI6SHFLDO'HFODUDWLRQ2Q,QWHU QHW*RYHUQDQFH FHUWLƄFDWH RI RULJLQ ZKLFK LQYROYHV WKH SDUWLFLSDWLRQ  2SHUDWLYHSDUDJUDSKRI6SHFLDO'HFODUDWLRQ2Q,QWHU RI $UJHQWLQD %ROLYLD %UD]LO &KLOH &RORPELD &XED QHW*RYHUQDQFH (FXDGRU0H[LFR3DQDPD3DUDJXD\3HUX8UXJXD\ II. REPORT ON LEGISLATION IN THE LATIN AMERICAN COUNTRIES 7

DQG9HQH]XHOD7KHSURMHFWKDVKHOSHGIDFLOLWDWHFURVV The adoption by member States of the technical ERUGHU WUDGH WKURXJK WKH XVH RI HOHFWURQLF PHGLD VSHFLƄFDWLRQV DQG JHQHUDO SURFHGXUHV IRU WKH GLJLWDO HVSHFLDOO\WKURXJKWKHLQWHJUDWLRQDQGKDUPRQL]DWLRQ FHUWLƄFDWHRIRULJLQLVVXHGE\WKH*HQHUDO6HFUHWDULDW RIVWDQGDUGVIRUPDWVDQGSODWIRUPVDOORZLQJIRULQ RI$/$',LQZLOOEHHVSHFLDOO\LPSRUWDQWIRUWKH teroperability of the customs systems in the different HFRQRPLFLQWHJUDWLRQRIWKHUHJLRQZKLFKDOVRUHOLHV FRXQWULHV KHDYLO\RQELODWHUDODJUHHPHQWV VHHER[ 

%R[ 'LJLWDOFHUWLƂFDWHRIRULJLQLQ$/$',20 ,QWKHFRQWH[WRI$/$',WKHGLJLWDOFHUWLƄFDWHRIRULJLQ '&2 FRQVLVWVRIDVHWRIVSHFLƄFDWLRQVVWDQGDUGV DQGWHFKQLFDOSURFHGXUHVWKDWSURYLGHWKHEDVLVIRUDQ,7LQIUDVWUXFWXUHFRQVLVWLQJRIDSSOLFDWLRQVDQG HOHFWURQLFGRFXPHQWVWKDWPDNHLWSRVVLEOHWRUHFRJQL]H'&2VLQWKHFRQWH[WRI$/$',$GHVFULSWLRQRI WKHDIRUHPHQWLRQHGVSHFLƄFDWLRQVVWDQGDUGVDQGWHFKQLFDOSURFHGXUHVPDNHVXSWKHPDLQFRQWHQWRI WKLVGRFXPHQW 7KHPDLQDSSOLFDWLRQVWKDWPDNHXSWKH'&2DUH L WKRVHSHUWDLQLQJWRWKHUHFHLSWRIUHTXHVWVIRUDQG LVVXDQFHRI'&2VRIHOLJLEOHHQWLWLHV LL WKRVHXVHGE\FXVWRPVWRUHFHLYHDQGYDOLGDWH'&2VLQWKHLP SRUWLQJFRXQWU\DQG LLL WKHFRPSXWHUL]HG'&26\VWHPRI$/$', L7KHDSSOLFDWLRQVXVHGWRUHFHLYHUHTXHVWVIRUDQGLVVXH'&2VIRUHOLJLEOHHQWLWLHVVKRXOGDOORZIRUWKH '&2UHTXHVWWREHVLJQHGHOHFWURQLFDOO\E\WKHH[SRUWHURUKLVRUKHUOHJDOUHSUHVHQWDWLYH7RWKDWHQG WKHH[SRUWHURUKLVRUKHUOHJDOUHSUHVHQWDWLYHPXVWSUHYLRXVO\REWDLQDGLJLWDOLGHQWLƄFDWLRQFHUWLƄFDWH GLJLWDO,' IURPWKHFRPSHWHQWFHUWLƄFDWLRQDXWKRULW\7KLVSURFHVVZLOOSURGXFHDQ;0/ H;WHQVLEOH 0DUNXS/DQJXDJH ƄOHFRQWDLQLQJWKHLQIRUPDWLRQUHTXLUHGIRUSURFHVVLQJWKHUHTXHVWIRUWKH'&2LQ DFFRUGDQFHZLWKWKHRULJLQUHJLPHVSHFLƄHGLQWKHUHOHYDQWDJUHHPHQW ,QWKDWUHJDUGWKHHOLJLEOHHQWLW\PXVWSURYLGHWKHQHFHVVDU\,7LQIUDVWUXFWXUHIRUUHFHLYLQJDQGSURFHVV LQJWKH'&2UHTXHVWYDOLGDWLQJWKHGLJLWDOVLJQDWXUHRIWKHH[SRUWHURUKLVRUKHUOHJDOUHSUHVHQWDWLYH GLJLWDOO\VLJQLQJWKHQHZ;0/ƄOHZKLFKFRQVWLWXWHVWKH'&2DQGLVVXLQJLWLQDFFRUGDQFHZLWKWKHWHUPV RIWKHUHOHYDQWRULJLQUHJLPH LL&XVWRPVKRXVHVPXVWDGDSWWKHLU,7V\VWHPVWRDOORZIRUWKHUHFHLSWDQGYDOLGDWLRQRI'&2V7KH YDOLGDWLRQSURFHVVZLOOHQWDLOVHQGLQJDXWRPDWLFUHTXHVWVIRUWKH'&2LQIRUPDWLRQWRWKHDXWRPDWHG '&2V\VWHP LLL7KH$/$','&2V\VWHPLVDZHEDSSOLFDWLRQWKDWLVPDLQO\GHVLJQHGWRDGPLQLVWHUDVHFXUHGLUHF WRU\RIGLJLWDO,'VRIVWDIIZKRDUHTXDOLƄHGWRVLJQ'&2VZKLOHDWWKHVDPHWLPHPDNLQJLWSRVVLEOHWR DVFHUWDLQIURPFXVWRPVDXWKRULWLHVZKHWKHULQIRUPDWLRQRQTXDOLƄHGVWDIIDQGWKHLUGLJLWDO,'VLVFXUUHQW ZKHQYDOLGDWLQJ'&2VDWWKHWLPHRIWKHLPSRUWDWLRQ 7KHPDLQHOHFWURQLFGRFXPHQWVRIWKH'&2DUHWKH'&2WKHGLJLWDO,'VRITXDOLƄHGVWDIIDQGRIXVHUV RIWKH'&2V\VWHPZKLFKPDNHXSWKHHOHFWURQLFLGHQWLƄFDWLRQGRFXPHQWVRIXVHUVRIWKH'&2V\VWHP DQGRITXDOLƄHGVWDIIDGHVFULSWLRQRIWKHPHFKDQLVPVXVHGIRUWKHHOHFWURQLFH[FKDQJHRILQIRUPDWLRQ LHWKHZHEVHUYLFHVDQGWKHH[FKDQJHƄOHVRIWKHVHFXUHGLUHFWRU\RIWKH'&2V\VWHP Source$/$',

 6HHWKHƄQDOUHSRUWRIWKHVHFRQGPHHWLQJRIQDWLRQDOFR LQVHFWLRQRQELODWHUDOFRRUGLQDWLRQPHHWLQJVWRIDFLOLWDWH RUGLQDWRUVIRUWKHGLJLWDOFHUWLƄFDWHRIRULJLQDWKWWSZZZ LPSOHPHQWDWLRQ RI FRRSHUDWLRQ SURMHFWV WKH UHSRUW VWDWHV DODGLRUJQVIDODGLUHXQLRQHVQVIGRFXPHQWRVƄOH,QIRUPH WKDW  ELODWHUDO PHHWLQJV ZHUH KHOG DPRQJ WKH FRXQWULHV )LQDO&2'SGI DYDLODEOHRQO\LQ6SDQLVK :LWKUHJDUG SUHVHQWDQGWKHUHVXOWVRIWKRVHPHHWLQJVDUHUHƅHFWHGLQ WR WKH LPSRUWDQFH RI ELODWHUDO DJUHHPHQWV VHFWLRQ  RQ VHFWLRQRQSUHVHQWDWLRQRIWKHUHVXOWVRIELODWHUDOPHHW RYHUYLHZDQGIROORZXSWRKRUL]RQWDOWHFKQLFDOFRRSHUDWLRQ LQJV IRU WKH SXUSRVH RI XSGDWLQJ GRFXPHQW $/$', 6(& SURMHFWVEHWZHHQEX\HUDQGVHOOHUFRXQWULHVFRQFHUQLQJLP GWRI1RYHPEHUHQWLWOHG,QVWUXPHQWDFLÐQGHO SOHPHQWDWLRQRIWKHSURJUDPPHRQFRRSHUDWLRQIRULPSOH 3URJUDPDGH&RRSHUDFLÐQSDUDODLPSOHPHQWDFLÐQGHO&2' PHQWDWLRQRI'&2VLQPHPEHUFRXQWULHVRI$/$',VWDWHV HQORVSDÊVHVPLHPEURVGHOD$/$', WKDWWKHSUHVLGLQJRIƄFHUVRIWKHPHHWLQJKDYHHQFRXUDJHG  6HH&HUWLƄFDFLÐQGH2ULJHQ'LJLWDOGHOD$/$',t(VSHFLƄFD FRXQWULHVWRFRQWLQXHPDNLQJSURJUHVVLQKRUL]RQWDOFRRS FLRQHV7ÆFQLFDV\3URFHGLPLHQWRV*HQHUDOHVDWKWWSIRURV HUDWLRQLQRUGHUWRDFKLHYHLPSOHPHQWDWLRQRIWKHGLJLWDOFHU DODGLRUJJWDK$/$',B6(&BGLUHYSGI WLƄFDWHRIRULJLQDVVRRQDVSRVVLEOHDQGWRWKDWHIIHFWLW ZRXOGSURYLGHRSSRUWXQLWLHVIRUELODWHUDOPHHWLQJV/LNHZLVH 8 Study on the harmonization of cyberlegislation in Latin America

7DEOH $/$',GLJLWDOFHUWLƂFDWHRIRULJLQ '&2 LPSOHPHQWDWLRQPDWUL[ 1234 567 Internal approval External approval 2IƂFLDO Production Development of Development of 2IƂFLDOUHJLVWUDWLRQLQ (validation of the DCO (validation of the DCO registration (validation platform for issuing platform for receiving Country the test DCO system signature in the DCO signature in the DCO in of the DCO DCOs (eligible entities) DCOs system) system) production signature DCO in the DCO In process Completed In process Completed In process Completed In process Completed In process Completed system system) Argentina XX X XXX Plurinational State of X Bolivia Brazil XX X XXX Chile XX XX Colombia XX XX X X Cuba XX Ecuador XXX Mexico XXX Panama XX Paraguay XX 3HUX Uruguay XXXXX Bolivarian Republic of Venezuela  0DWUL[VKRZLQJWKHVWDWXVRILPSOHPHQWDWLRQRI'&2 YHUVLRQ LQPHPEHUFRXQWULHVRI$/$',EDVHGRQWKHSURYLVLRQVRI UHVROXWLRQRIWKH&RPPLWWHHRI5HSUHVHQWDWLYHV  3HUXGRHVQRWFXUUHQWO\KDYHDSURSRVDOIRUDGMXVWPHQWRIWKH'&2V\VWHP Source: $/$',t 7DEOHGHVFULEHVWKHVWDWXVRILPSOHPHQWDWLRQRIWKH EHQHƄWHGGLIIHUHQWHFRQRPLHVLQ/DWLQ$PHULFD&HQ ODWHVWYHUVLRQRIWKH$/$',GLJLWDOFHUWLƄFDWHRIRULJLQ WUDO$PHULFDDQGWKH&DULEEHDQ VHHWDEOH  6(/$IRULWVSDUWKDVDOVRSURPRWHGWKH6LQJOH:LQ $URXQG  SHU FHQW RI WKH FRXQWULHV LQ WKH UHJLRQ GRZIRU)RUHLJQ7UDGHLQWKHUHJLRQ7KLVV\VWHPKDV KDYHXVHGWKLVWRROWRVRPHGHJUHH7KHOHYHORILP

Table 4. Development of the Single Window for Foreign Trade in Latin America and the Caribbean (2014) Country Exports Imports In development Argentina - - X Brazil X X Chile X - X – in development. Incorporation of services: to supplement exports and initiate imports Colombia X X Constant improvement: inclusion of other services, in addition to exports and imports Costa Rica X - X – Incorporation of services: imports Ecuador X X El Salvador X - X – Incorporation of services: imports Guatemala X - Honduras - - X Mexico X X Constant improvement: inclusion of other services Nicaragua - - X Panama X - X: in development. Incorporation of services: to supplement exports and initiate imports Paraguay X - - Peru X X Constant improvement: inclusion of other services in addition to exports and imports Dominican Republic - - X Trinidad and Tobago X X X – in development. Incorporation of other services: imports Uruguay X X X – supplementing exports and imports

Source6(/$ II. REPORT ON LEGISLATION IN THE LATIN AMERICAN COUNTRIES 9

SOHPHQWDWLRQDQGPDWXULW\RIWKHV\VWHPUDQJHVIURP FRQVROLGDWLQJWKH6LQJOH:LQGRZIRU)RUHLJQ7UDGHLQ countries such as Colombia, which has had an op /DWLQ $PHULFD DQG WKH &DULEEHDQ DV D NH\ FRPSR HUDWLRQDO 6LQJOH :LQGRZ IRU )RUHLJQ 7UDGH LQ SODFH QHQW RI WUDGH IDFLOLWDWLRQ ZLWK D YLHZ WR KHOSLQJ WKH VLQFH WKH PLGV WR $UJHQWLQD ZKLFK UHFHQWO\ FRXQWULHVRIWKHUHJLRQLPSURYHWKHLUFRPSHWLWLYHQHVV VWDUWHGDSSO\LQJLWDQG1LFDUDJXDZKLFKKDVEHJXQ DQGVXVWDLQDELOLW\VRDVWRDFKLHYHJUHDWHUDQGPRUH WR GHYHORS LW 7KH LQIRUPDWLRQ SURYLGHG LQ WKH WDEOH HIƄ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important that those countries that have not yet done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ƄFLHQW ,Q DGGLWLRQ WKH 3HUPDQHQW 6HFUHWDULDW RI 6(/$ KDV RSWLRQV IRU SURWHFWLQJ FRQVXPHU LQWHUHVWV ZKHWKHU contributed to the considerable development of the WKH\DUHVXSSRUWHGE\UREXVWOHJDOIUDPHZRUNVRUE\ intellectual production and systematization of the doc OHVVGHYHORSHGRQHV7KHUHKDVEHHQDQLQFUHDVHDO XPHQWDWLRQ RQ WKH 6LQJOH :LQGRZ IRU )RUHLJQ 7UDGH EHLWPRGHVWLQWKHXVHRIUHJLRQDOVHDOVRIWUXVWZKLFK DQGWRSDSHUOHVVFURVVERUGHUWUDGHWKURXJKWKH6FH FDQKHOSHQFRXUDJHWKHGHYHORSPHQWRIHFRPPHUFH QDULRIRU'LJLWDOL]DWLRQRI)RUHLJQ7UDGH3URFHGXUHVLQ 7KHUHJLRQDOH&RQƄDQ]DSURJUDPPHRIH,QVWLWXWRDQG /DWLQ$PHULFDDQGWKH&DULEEHDQ 6(/$  and WKH$UJHQWLQH&KDPEHURIH&RPPHUFHFRPELQHVWKH WKH 3LORW 3URMHFW IRU ,QWHURSHUDELOLW\ DQG +DUPRQL]D UHJLRQDOHIIRUWVRIHFRPPHUFHFKDPEHUVDQGDV WLRQRI6LQJOH:LQGRZVIRU)RUHLJQ7UDGH within the sociations and includes a standard of best practices IUDPHZRUNRIWKH/DWLQ$PHULFDQ3DFLƄF5LPZKLFK WKDWIDFLOLWDWHWKHDGRSWLRQXVHDQGPXWXDOUHFRJQLWLRQ ZDV GHYHORSHG LQ  XQGHU D FRRSHUDWLRQ DJUHH RIVHDOVRIWUXVWDQGFRGHVRIEHVWSUDFWLFHVLQ/DWLQ PHQWEHWZHHQWKH$QGHDQ'HYHORSPHQW&RUSRUDWLRQ $PHULFD WKH 'HYHORSPHQW %DQN RI /DWLQ $PHULFD DQG 6(/$ 7KHSURMHFWDOVRLQFOXGHVVSHFLƄFGRFXPHQWVRQGLJL The adoption of data protection laws that comply WDOVLJQDWXUHVDQGHFRPPHUFH ZLWKWKHSDUDPHWHUVVHWLQWKHJXLGHOLQHVRIWKH,EHUR $PHULFDQ'DWD3URWHFWLRQ1HWZRUNZLOOJRDORQJZD\ 6LQFHDOVRLQWKHIUDPHZRUNRIDFRRSHUDWLRQ WRZDUGVLQFUHDVLQJWUXVWDPRQJRQOLQHFRQVXPHUV,Q DJUHHPHQW ZLWK WKH $QGHDQ 'HYHORSPHQW &RUSRUD DGGLWLRQ6WDWHVVKRXOGUDWLI\WKH&RXQFLORI(XURSHpV WLRQSURJUHVVZDVPDGHLQDSURJUDPPHIRUFUHDWLRQ &RQYHQWLRQ RQ &\EHUFULPH DQG WKH ,EHUR$PHULFDQ RI WKH /DWLQ $PHULFDQ DQG &DULEEHDQ 1HWZRUN RI &RRSHUDWLRQ $JUHHPHQW RQ 5HVHDUFK 8QGHUZULWLQJ 'LJLWDO DQG &ROODERUDWLYH 3RUWV ZKLFK LQYROYHV QRW DQG 2EWDLQLQJ (YLGHQFH RQ &\EHUFULPH DQG DGRSW RQO\ GLJLWL]LQJ SRUW SURFHGXUHV RSHUDWLRQDO DVSHFWV WKH UHFRPPHQGDWLRQ RI WKH &RQIHUHQFH RI 0LQLVWHUV RIVHUYLFHVV\QFKURQL]DWLRQHOHPHQWVRIJRYHUQDQFH RI-XVWLFHRI,EHUR$PHULFDQ&RXQWULHVRQWKHGHƄQL DQGTXDOLW\VWDQGDUGVEXWDOVRHQVXULQJWKHLQWHURS WLRQDQGSXQLVKPHQWRIF\EHUFULPH7KHFUHDWLRQRID HUDELOLW\RIWKH6LQJOH:LQGRZIRU)RUHLJQ7UDGHDQG FRPSXWHUVHFXULW\LQFLGHQWUHVSRQVHWHDPDFFRUGLQJ WKH 3RUW 6LQJOH :LQGRZ 7KH 3HUPDQHQW 6HFUHWDULDW WRWKHWHUPVRIWKH,QWHU$PHULFDQ6WUDWHJ\WR&RPEDW RI6(/$FRQWULEXWHVE\LPSOHPHQWLQJGHYHORSLQJDQG 7KUHDWV WR &\EHUVHFXULW\ RI WKH 2$6 ,QWHU$PHULFDQ  6HHWKHƄQDOUHSRUWVRIWKHPHHWLQJVDWKWWSZZZVHODRUJ &RPPLWWHH DJDLQVW 7HUURULVP ZLOO JR D ORQJ ZD\ WR  6HH KWWSZZZVHODRUJPHGLDW ZDUGVFRQVROLGDWLQJFRQƄGHQFHLQHOHFWURQLFPHDQV GLBBSDQRUDPDBGLJLWDOBWUDPLWHVBFRPHUFLRBH[WHULRUSGI  6HH KWWSVZZZXQHFHRUJƄOHDGPLQ'$0FHIDFWFIBIR UXPV*HQHYDB337VB6:,0HWKRGRORJ\IRU1DWLRQ DO6LQJOH:LQGRZ$OLJQPHQWSGI  6HHKWWSZZZHLQVWLWXWRRUJVLWHLQLFLDWLYDVHFRQƄDQ]D 10 Study on the harmonization of cyberlegislation in Latin America II. REPORT ON LEGISLATION IN THE LATIN AMERICAN COUNTRIES 11

II. REPORT ON LEGISLATION IN THE LATIN AMERICAN COUNTRIES

7KLVVHFWLRQGLVFXVVHVWKHGHYHORSPHQWRIOHJLVODWLRQ SOLFDEOHWRZULWWHQGRFXPHQWV7KHODZLVEDVHGRQWKH LQ HDFK RI WKH SDUWLFLSDWLQJ FRXQWULHV $ EULHI DQDO\ 81&,75$/0RGHO/DZRQ(OHFWURQLF&RPPHUFHDQG VLVLVPDGHRIOHJLVODWLRQLQWKHDUHDVRI D HOHFWURQLF WKH81&,75$/0RGHO/DZRQ(OHFWURQLF6LJQDWXUHV WUDQVDFWLRQVHOHFWURQLFVLJQDWXUHV E FRQVXPHUSUR DQGLWLVXVHGLQERWKWKHSXEOLFDQGSULYDWHVHFWRUV WHFWLRQ F  SURWHFWLRQ RI SHUVRQDO GDWD G  LQGXVWULDO DQG LQWHOOHFWXDO SURSHUW\ H  GRPDLQ QDPHV I  F\ Several of the provinces have made this law appli EHUFULPH DQG LQIRUPDWLRQ VHFXULW\ DQG J  SHQGLQJ FDEOHWRSXEOLFDGPLQLVWUDWLRQLQWKHLUMXULVGLFWLRQV,Q OHJLVODWLRQDQGFKDOOHQJHV DGGLWLRQ$UJHQWLQDKDVVLJQHGDQGLQFRUSRUDWHGLQWR LWV GRPHVWLF OHJLVODWLRQ WKH 0(5&2685 UHJXODWLRQV ARGENTINA RQVWDQGDUGVIRUWKHXVHRIGLJLWDOVLJQDWXUHV 5HVROX WLRQV*0&DQGRQHOHFWURQLFDQGGLJLWDO $UJHQWLQDKDVQRWDGRSWHGVSHFLƄ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ƄFLDO SRVW t LQ VHWVIRUWKWKHSULQFLSDOUXOHVJRYHUQLQJRIIHULQJVWRWKH FOXGLQJGRRUWRGRRUVHUYLFHtPD\XVHWKHSURFHGXUH public, their acceptance, the formation of contracts HQYLVDJHGLQ*HQHUDO5HVROXWLRQRQO\WZLFHHDFK between parties both of whom are physically present, FDOHQGDU\HDUWDNLQJLQWRDFFRXQWWKHDQQXDOH[HPS as well as between parties that are not, and the time WLRQRI86HQYLVDJHGLQDUWLFOH   F RI'HFUHH DWZKLFKDFRQWUDFWWDNHVHIIHFW 1RDQGWKHDPHQGPHQWVWKHUHWR$Q\VKLS Under the Commercial Code, indeterminate offers to ment additional to the aforementioned limit must be WKHSXEOLFDUHQRWELQGLQJ7RSURWHFWFRQVXPHUV$FW SURFHVVHGXQGHUWKH*HQHUDO,PSRUW5HJXODWLRQV 1R  PDNHV RIIHUV WKDW DUH GLUHFWHG WR QRQ VSHFLƄFSRWHQWLDOFRQVXPHUVELQGLQJRQWKRVHLVVXLQJ *HQHUDO5HVROXWLRQUHTXLUHVWD[SD\HUVZKRVHOO WKHP RYHU WKH SHULRG RI WLPH GXULQJ ZKLFK WKH RIIHU JRRGVRUSURYLGHVHUYLFHVWRHQGXVHUVWRH[KLELWIRUP LV LQ IRUFH DQG SDUWLHV PDNLQJ RIIHUV PXVW SURYLGH 1R10t7D['DWDDWWKHLUUHWDLORUVHUYLFHORFD LQIRUPDWLRQ UHJDUGLQJ WKH PRGDOLWLHV FRQGLWLRQV DQG WLRQVZDLWLQJURRPVRIƄFHVRUUHFHSWLRQDUHDVDQG OLPLWDWLRQV VXUURXQGLQJ WKH RIIHUV ,W DOVR HVWDEOLVKHV WRGLVSOD\WKHIRUP107D['DWDORJRLQDYLVLEOH WKDWWKHVSHFLƄFVRIIHUHGWKURXJKDGYHUWLVLQJVKDOOEH SODFH RQ WKHLU ZHEVLWH DORQJ ZLWK WKH K\SHUOLQN SUR ELQGLQJRQWKHSDUW\RIIHULQJWKHPDQGWKDWWKHVHVSH YLGHGE\WKH)HGHUDO3XEOLF5HYHQXH$GPLQLVWUDWLRQ FLƄFVPXVWEHLQFOXGHGLQWKHFRQWUDFWPDGHZLWKWKH ,QWKHDUHDRISXEOLFSURFXUHPHQWWKURXJKHOHFWURQLF FRQVXPHU PHDQV 'HFUHH 1R  JRYHUQV WKH SUR $FW1RUHFRJQL]HVWKHOHJDOYDOLGLW\RIHOHF FXUHPHQW V\VWHP RI WKH QDWLRQDO JRYHUQPHQW DQG WURQLF GRFXPHQWV DQG VLJQDWXUHV DQG RI GLJLWDO WKH UHODWHG UHJXODWLRQV DUH VHW IRUWK LQ 'HFUHH 1R VLJQDWXUHV PDNLQJ KDQGZULWWHQ VLJQDWXUHV DQG GLJL  ZKLFK DXWKRUL]HV XVH RI WKH *RYHUQ WDO VLJQDWXUHV OHJDOO\ HTXLYDOHQW ,W DOVR UHTXLUHV WKDW PHQW(OHFWURQLF3URFXUHPHQW6\VWHP$GPLQLVWUDWLYH GLJLWDOGRFXPHQWVFRPSO\ZLWKWKHUHTXLUHPHQWVDS 'HFLVLRQ1RRIWKH2IƄFHRIWKH&KLHIRIWKH 12 Study on the harmonization of cyberlegislation in Latin America

&DELQHWRI0LQLVWHUVVHWVWHFKQLFDORSHUDWLRQDOVWDQG PDUNHWRUSURYLGHRQOLQHVHUYLFHVWRFRQVXPHUVRUXV DUGVIRUWKHFRXQWU\p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to service contracts by electronic or other remote $SULO  DQG WKH WUHDWLHV RQ LQWHUQDWLRQDO FLYLO ODZ PHDQVWKH$FWSURYLGHVWKDWWKHFRQVXPHUVKDOOEH 0RQWHYLGHR7UHDWLHVRIDQG ZKLFKHVWDE HQWLWOHGWRKDYHFOHDUFRPSUHKHQVLEOHDQGXQHTXLYR OLVKWKHODZDSSOLFDEOHWRLQWHUQDWLRQDOFRQWUDFWV FDODFFHVVWRWKHJHQHUDOWHUPVRIWKHFRQWUDFWDQGEH able to store or print such terms and conditions, and 7KHQHZ&LYLODQG&RPPHUFLDO&RGHJRYHUQVFHUWDLQ that it must be clearly stated that the contract can be DVSHFWVRIHFRPPHUFH,Q%RRN7KUHHRQSHUVRQDO terminated at the discretion of the consumer or user ULJKWV REOLJDWLRQV DQG FRQWUDFWV 7LWOH ,,, RQ FRQ E\WKHVDPHPHDQVXVHGWRFRQFOXGHLW sumer contracts, includes a section on special types RI FRQWUDFWV WKDW FRYHUV UHPRWH FRQWUDFWV LQFOXGLQJ $FW1RRIWKH$XWRQRPRXV&LW\RI%XHQRV$LUHV WKRVHHQWHUHGLQWRYLDHOHFWURQLFPHDQV,WDOVRVWLSX provides that commercial establishments that provide ODWHVWKDWZKHQHYHUWKH&RGHRUDVSHFLDOODZUHTXLUHV ,QWHUQHW DFFHVV PXVW LQVWDOO DQG DFWLYDWH ƄOWHUV IRU that a contract be made available in written form, SRUQRJUDSKLF FRQWHQW ,Q DGGLWLRQ $FW 1R  WKLVUHTXLUHPHQWVKDOOEHXQGHUVWRRGWREHPHWLIWKH RQDGYHUWLVLQJIRUWRXULVPSURYLGHVWKDWDOODGYHUWLV contract with the consumer or user is supported by LQJFRQWDLQHGLQHOHFWURQLFPHDQVZKLFKVKRZVVKRZ VRIWZDUHRUDVLPLODUWHFKQRORJ\ pictures of tourist attractions must meet certain re Several articles in the Code allow for the use of “elec TXLUHPHQWVUHJDUGLQJLQIRUPDWLRQ WURQLFPHDQVRUPHFKDQLVPVrIRUGLIIHUHQWDFWLRQVRU OHJDODFWVWKXVUHFRJQL]LQJWKHXVHRI,&7V:LWKUH 7KH QHZ &LYLO DQG &RPPHUFLDO &RGH JRYHUQV FRQ JDUG WR GLJLWDO VLJQDWXUHV WKH &RGH SURYLGHV WKDW LQ VXPHUFRQWUDFWVDQGDPRQJRWKHUULJKWVLQFOXGHVWKH WKH FDVH RI GRFXPHQWV JHQHUDWHG HOHFWURQLFDOO\WKH ULJKWRIFRQVXPHUVWRRSWRXWZLWKRXWLQFXUULQJOLDELOLW\ UHTXLUHPHQWWKDWWKH\EHVLJQHGE\DQLQGLYLGXDOPD\ SURYLGHGWKDWWKH\GRVRZLWKLQGD\VDIWHUDFFHSW EHFRQVLGHUHGPHWLIDGLJLWDOVLJQDWXUHLVXVHGZKLFK LQJWKHRIIHU establishes without a doubt the identity of the author DQGWKHLQWHJULW\RIWKHGRFXPHQW F  3URWHFWLRQRISHUVRQDOGDWD E  &RQVXPHUSURWHFWLRQ )RUWKHSURWHFWLRQRISHUVRQDOGDWD$FW1R $FW 1R  VHWV IRUWK VSHFLDO UHTXLUHPHQWV IRU SURYLGHV D UHJLPH WKDW LV DOLJQHG ZLWK (XURSHDQ FRQWUDFWVZLWKFRQVXPHUVZKRZLWKLQƄYHGD\VRIWKH UHJXODWLRQV 'LUHFWLYH(& 7KLV$FWHVWDEOLVKHV date on which the product is delivered or on which the WKH1DWLRQDO2IƄFHIRUWKH3URWHFWLRQRI3HUVRQDO'DWD FRQWUDFWLVVLJQHGKDYHWKHULJKWWRRSWRXWZLWKRXW DQ DG KRF HQWLW\ UHVSRQVLEOH IRU PRQLWRULQJ FRPSOL LQFXUULQJ DQ\ OLDELOLW\LI SURFXUHPHQW RI WKH JRRGV LV DQFH ZLWK WKH $FW LQ YDULRXV FRQWH[WV ,Q  WKH HIIHFWHGWKURXJKHOHFWURQLFPHDQV,QDGGLWLRQVRPH (XURSHDQ 8QLRQ UHFRJQL]HG WKH FRXQWU\pVUHJXODWRU\ VHFWRUV KDYH DGRSWHG VHOIUHJXODWLRQ PHDVXUHV WR IUDPHZRUN DV EHLQJ FRQVLVWHQW ZLWK WKH VWDQGDUGV SURWHFWFRQVXPHUVpULJKWV7KHVHLQFOXGHWKH&RGHRI RI WKH &RXQFLO RI (XURSH 'HFUHH 1R  &RQGXFWRIWKH&KDPEHURI&RPPHUFLDO,QIRUPDWLRQ OD\V GRZQ UHJXODWLRQV IRU WKH $FW RQ 3URWHFWLRQ RI )LUPVDQGWKH&RGHRI(WKLFVRIWKH'LUHFWDQG,QWHUDF 3HUVRQDO'DWD WLYH0DUNHWLQJ$VVRFLDWLRQ G  ,QGXVWULDODQGLQWHOOHFWXDOSURSHUW\ $WWKHUHJLRQDOOHYHO$UJHQWLQDKDVLQFRUSRUDWHGLQWR ,QWKHDUHDRILQWHOOHFWXDOSURSHUW\ULJKWV$UJHQWLQDKDV LWVGRPHVWLFODZ0(5&2685&RPPRQ0DUNHW*URXS VLJQHGWKHIROORZLQJLQVWUXPHQWV *0& 5HVROXWLRQ1RRQFRQVXPHUVpULJKW to information in connection with transactions con • :,32 &RS\ULJKW 7UHDW\ DQG :,32 3HUIRUPDQFHV GXFWHGYLDWKH,QWHUQHW DQG3KRQRJUDPV7UHDW\ $WWKHSURYLQFLDOOHYHO$FW1RRIWKH$XWRQR • %HUQH &RQYHQWLRQ IRU WKH 3URWHFWLRQ RI /LWHUDU\ PRXV &LW\ RI %XHQRV $LUHV UHTXLUHV LQGLYLGXDOV ZKR DQG$UWLVWLF:RUNV II. REPORT ON LEGISLATION IN THE LATIN AMERICAN COUNTRIES 13

• &RQYHQWLRQ IRU WKH 3URWHFWLRQ RI 3URGXFHUV RI 6HFXULW\3ROLF\IRU0RGHO,QIRUPDWLRQZDVDGRSWHGIRU 3KRQRJUDPV$JDLQVW8QDXWKRUL]HG'XSOLFDWLRQRI WKHQDWLRQDOSXEOLFVHFWRUWKLVGHFLVLRQDOVRSURYLGHV 7KHLU3KRQRJUDPV *HQHYD&RQYHQWLRQ IRUWKHRSHUDWLRQRIDQDWLRQDOFRPSXWHUHPHUJHQF\ UHVSRQVHWHDP • ,QWHUQDWLRQDO&RQYHQWLRQIRUWKH3URWHFWLRQRI3HU IRUPHUV 3URGXFHUV RI 3KRQRJUDPV DQG %URDG $W WKH QDWLRQDO OHYHO WKH &\EHUGHIHQFH &RPPDQGR FDVWLQJ2UJDQL]DWLRQV 5RPH&RQYHQWLRQ ZDVFUHDWHGE\0LQLVWU\RI'HIHQFH'HFLVLRQ1R • %UXVVHOV&RQYHQWLRQUHODWLQJWRWKH'LVWULEXWLRQRI RI0D\$WWKHUHJLRQDOOHYHO81$685LQLWLD 3URJUDPPH&DUU\LQJ6LJQDOV7UDQVPLWWHGE\6DW WLYHVRQWKHHVWDEOLVKPHQWRIMRLQWF\EHUGHIHQFHSROLF\ ellite ZHUHFUHDWHGLQ •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t HFRPPHUFH ZKLFK ZDV VXEPLWWHG 0LQLVWU\IRU)RUHLJQ$IIDLUVDQGFDPHXQGHUWKHDHJLV WR &RQJUHVV LQ $XJXVW  7KH &RQJUHVV LV DOVR RIWKH/HJDODQG7HFKQLFDO6HFUHWDULDWRIWKH2IƄFHRI FRQVLGHULQJ WKH ELOO RQ RQOLQH FRPPHUFH DEURJDWLQJ WKH3UHVLGHQW 'HFLVLRQV 1RV  DQG  RI WKH ,Q)HEUXDU\WKHSUDFWLFHRIUHJLVWHULQJGRPDLQ )HGHUDO3XEOLF5HYHQXH$GPLQLVWUDWLRQ QDPHVIUHHRIFKDUJHZDVGLVFRQWLQXHGDQGDIHHRI $PRQJWKHPDLQFKDOOHQJHVLWIDFHV$UJHQWLQDQHHGV $UJHQWLQHSHVRVZDVVHWIRUWKHUHJLVWUDWLRQSUR WRHQVXUHWKDWWKHSURYLQFHVDFFHSW$FW1R FHGXUH DQGLQWKHLQWHUQDWLRQDOFRQWH[WWKHFRXQWU\QHHGVWR I  &\EHUFULPHDQGLQIRUPDWLRQVHFXULW\ DGKHUHWRWKH&RXQFLORI(XURSHpV&RQYHQWLRQRQ&\ EHUFULPHDQGVLJQWKH8QLWHG1DWLRQV&RQYHQWLRQRQ ,QWHUPVRIFULPLQDOODZ$FW1RRI-XQH WKH8VHRI(OHFWURQLF&RPPXQLFDWLRQVLQ,QWHUQDWLRQDO  DPHQGLQJ WKH &ULPLQDO &RGH GHƄ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which can be implemented and publicized by means GHƄQHVWKHRIIHQFHRIYLRODWLQJVHFUHF\DQGLPSURSHUO\ RIWKHQHZ,&7V LQWHUFHSWLQJFRPPXQLFDWLRQV D  (OHFWURQLFWUDQVDFWLRQVHOHFWURQLFVLJQDWXUHV 5HJDUGLQJ VHFXULW\ RI LQIRUPDWLRQ WKH 2IƄFH RI WKH &KLHIRIWKH&DELQHWRI0LQLVWHUVLVVXHG'HFLVLRQ1R ,Q%ROLYLDHFRPPHUFHLVJRYHUQHGE\&KDSWHU)RXU  RI  -XO\  FUHDWLQJ WKH 1DWLRQDO RQHFRPPHUFHRI7LWOH,9RQFRQWHQWGHYHORSPHQW 3URJUDPPHRI&ULWLFDO,QIRUPDWLRQDQG&\EHUVHFXULW\ DQG ,&7 DSSOLFDWLRQV RI WKH *HQHUDO $FW RQ 7HOH ,QIUDVWUXFWXUHV WR RSHUDWH ZLWKLQ WKH 1DWLRQDO 2IƄFH FRPPXQLFDWLRQV ,QIRUPDWLRQ DQG &RPPXQLFDWLRQV RI,QIRUPDWLRQ7HFKQRORJLHV%\'HFLVLRQ1R 7HFKQRORJLHV $FW1RRI$XJXVW &KDS RIWKH1DWLRQDO2IƄFHRI,QIRUPDWLRQ7HFKQRORJLHVWKH WHU)RXURI7LWOH,9LQFOXGHVDUWLFOHVRQWKHHOHFWURQLF 14 Study on the harmonization of cyberlegislation in Latin America

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ƄFLHQWFRQWURO SHUVRQDODQGZRUNUHODWHGHPDLODQGHOHFWURQLFDG PHFKDQLVPVWKDWZLOOHQDEOHLWWRVDWLVIDFWRULO\IXOƄOLWV YHUWLVLQJFRPPXQLFDWLRQV'LJLWDOGRFXPHQWVODFNLQJ SXUSRVHDQGIDFLOLWDWHFRPSOLDQFHZLWKWD[REOLJDWLRQV GLJLWDOVLJQDWXUHVPD\EHDGPLWWHGDVHYLGHQFH RIWD[SD\HUVRUWKLUGSDUW\SD\HUV(OHFWURQLFWUDQVDF 6XSUHPH'HFUHH1RRQWKHUHJXODWLRQVWR$FW tions conducted and recorded in the computerized 1R  RQ WHOHFRPPXQLFDWLRQV LQIRUPDWLRQ DQG V\VWHP RI WKH 7D[ $GPLQLVWUDWLRQ E\ DQ DXWKRUL]HG FRPPXQLFDWLRQVWHFKQRORJLHVRI1RYHPEHU XVHUKDYHOHJDOYDOLGLW\ JRHVLQWRJUHDWHUGHWDLORQWKHWHFKQLFDODGPLQLVWUDWLYH 7D[UHJXODWLRQ1RRI'HFHPEHU DQGOHJDOUHTXLUHPHQWVIRUHOHFWURQLFVLJQDWXUHVGLJL LVVXHGE\WKH1DWLRQDO7D[6HUYLFHJRYHUQVWD[HVUH WDOVLJQDWXUHVGLJLWDOFHUWLƄFDWHVWKHURRWFHUWLƄFDWLRQ ODWLQJWRWKHVDOHRIJRRGVWKURXJKHFRPPHUFHZLWKLQ DXWKRULW\WKHFHUWLƄFDWLRQDJHQF\DQGWKHUHJLVWUDWLRQ WKHQDWLRQDOWHUULWRU\,WFRYHUVWUDQVDFWLRQVSHUWDLQLQJ DXWKRULW\ WR WKH VDOH RI JRRGV WKURXJK HFRPPHUFH WKDW DUH $FW1RRQƄQDQFLDOVHUYLFHVRI$XJXVW FRQGXFWHGE\LQGLYLGXDOVRUOHJDOHQWLWLHV DOVRHPSRZHUVƄQDQFLDOLQVWLWXWLRQVWRSURYLGHVHUYLFHV E  &RQVXPHUSURWHFWLRQ WKURXJKHOHFWURQLFPHDQVSURYLGHGVHFXULW\VWDQGDUGV DUHPHWWRJXDUDQWHHLQWHJULW\FRQƄGHQWLDOLW\DXWKHQ $UWLFOHV  DQG  RI WKH &RQVWLWXWLRQ SURYLGH JHQ WLFDWLRQ DQG QRQUHSXGLDWLRQ 6XFK WUDQVDFWLRQV DQG HUDO SURWHFWLRQ IRU FRQVXPHUV ,Q DGGLWLRQ DOWKRXJK any information contained in and transmitted in the products and services provided by electronic means IRUPRIHOHFWURQLFGDWDPHVVDJHVVKDOOKDYHWKHVDPH DUHQRWVSHFLƄ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the duties of users and consumers and the duties of YLFHV 7KHVH VWDQGDUGV DUH REOLJDWRU\ IRU ƄQDQFLDO SURYLGHUV DQG LW OD\V GRZQ UXOHV RQ WKH SURFHVVLQJ HQWLWLHVWKDWSURYLGHVXFKVHUYLFHV of administrative complaints and on forms of redress, ,QUHJDUGWRWD[ODZVWKH7D[&RGH $FW1R RI DPRQJRWKHUSURYLVLRQV $XJXVWSURYLGHVWKDW,7GHYLFHVDQGSULQWRXWV F  3URWHFWLRQRISHUVRQDOGDWD of the information contained in them shall constitute OHJDOHYLGHQFHLQDFFRUGDQFHZLWKWKHUHJXODWLRQVLV :LWKUHJDUGWRWKHSURWHFWLRQRISHUVRQDOGDWDWKH3R VXHG RQ WKH PDWWHU$Q\ HOHFWURQLF PHGLXP PD\ EH OLWLFDO&RQVWLWXWLRQRIWKH3OXULQDWLRQDO6WDWHRI%ROLYLD XVHG IRU LQYRLFLQJ VXEPLVVLRQ RI VZRUQ VWDWHPHQWV HVWDEOLVKHVWKHULJKWWREULQJDQDFWLRQIRUSURWHFWLRQ DQG RWKHU WD[UHODWHG LQIRUPDWLRQ ZLWKKROGLQJ FRO RISULYDF\ZKHUHE\WKHGDWDVXEMHFWWKHOHJDOSHUVRQ OHFWLRQDQGSD\PHQWRIWD[HVERRNNHHSLQJUHFRUGV or body corporate is entitled to demand compliance DQGDFFRXQWLQJDQQRWDWLRQVDVZHOODVGRFXPHQWD ZLWKWKHULJKWWRNQRZFKDOOHQJHFDQFHORUUHPRYHKLV WLRQRQWD[REOLJDWLRQVDQGWKHSUHVHUYDWLRQRIVXFK RUKHUSHUVRQDOGDWD,WDOVRUHFRJQL]HVWKHIXQGDPHQ GRFXPHQWDWLRQ VXEMHFW WR DXWKRUL]DWLRQ E\ WKH 7D[ WDOULJKWWRSHUVRQDORUIDPLO\SULYDF\RUWRDSHUVRQpV $GPLQLVWUDWLRQ WR WD[SD\HUV DQG UHVSRQVLEOH WKLUG LPDJHKRQRXURUUHSXWDWLRQ&KDSWHU)RXURQDFWLRQ SDUWLHV7KLVDOVRDSSOLHVWRFRPPXQLFDWLRQVDQGQRWL for the protection of privacy, of the Code of Constitu ƄFDWLRQVIURPWKH7D[$GPLQLVWUDWLRQWRWD[SD\HUVDQG WLRQDO3URFHGXUHRI-XO\RXWOLQHVWKHSURFHGXUH WKLUGSDUW\SD\HUV IRUEULQJLQJDQDFWLRQIRUSURWHFWLRQRISULYDF\ZLWKRXW II. REPORT ON LEGISLATION IN THE LATIN AMERICAN COUNTRIES 15

DSULRUDGPLQLVWUDWLYHFRPSODLQWEHLQJQHFHVVDU\RZ ,QWKHLQWHUQDWLRQDOVSKHUH%ROLYLDKDVVLJQHGWKHIRO LQJWRWKHLPPLQHQFHRIYLRODWLRQRIWKHSURWHFWHGULJKW ORZLQJLQVWUXPHQWVRQLQWHOOHFWXDOSURSHUW\ WKHDFWLRQLVLQWHQGHGDVDSUHFDXWLRQDU\PHDVXUH • :,32 &RS\ULJKW 7UHDW\ DQG :,32 3HUIRUPDQFHV 7KH VXSUHPH GHFUHH OD\LQJ GRZQ WKH UHJXODWLRQV WR DQG3KRQRJUDPV7UHDW\ $FW1RRQWHOHFRPPXQLFDWLRQVLQIRUPDWLRQDQG • %HUQH &RQYHQWLRQ IRU WKH 3URWHFWLRQ RI /LWHUDU\ FRPPXQLFDWLRQVWHFKQRORJLHVHVWDEOLVKHVJXLGHOLQHV DQG$UWLVWLF:RUNV IRUWKHKDQGOLQJRISHUVRQDOGDWD2QHRIWKHUHTXLUH PHQWVLVWKDWWKHGDWDVXEMHFWJLYHKLVRUKHUH[SUHVV • &RQYHQWLRQ IRU WKH 3URWHFWLRQ RI 3URGXFHUV RI FRQVHQW,QDGGLWLRQSHUVRQVZKRDUHDVNHGWRSUR 3KRQRJUDPV$JDLQVW8QDXWKRUL]HG'XSOLFDWLRQRI vide personal data must be informed in advance that 7KHLU3KRQRJUDPV *HQHYD&RQYHQWLRQ WKHLUGDWDZLOOEHVXEMHFWWRSURFHVVLQJWKHSXUSRVH • ,QWHUQDWLRQDO&RQYHQWLRQIRUWKH3URWHFWLRQRI3HU IRUZKLFKWKHGDWDDUHEHLQJFROOHFWHGDQGUHFRUGHG IRUPHUV 3URGXFHUV RI 3KRQRJUDPV DQG %URDG who will be the potential recipients of the information, FDVWLQJ2UJDQL]DWLRQV 5RPH&RQYHQWLRQ  the identity and domicile of the person responsible IRU SURFHVVLQJ WKH GDWD RU RI KLV RU KHU UHSUHVHQWD • $JUHHPHQWRQ7UDGH5HODWHG$VSHFWVRI,QWHOOHF WLYHDQGKRZWRH[HUFLVHWKHULJKWWRDFFHVVFRUUHFW WXDO3URSHUW\5LJKWV 75,36 DGPLQLVWHUHGE\:72 XSGDWHFDQFHOFKDOOHQJHRUUHYRNHWKHLQIRUPDWLRQRU WDNHVXFKRWKHUDFWLRQDVPD\EHSHUWLQHQW H  'RPDLQQDPHV :LWKUHJDUGWRGRPDLQQDPHVWKHFRXQWU\pV1,& ER  /LNHZLVHWKH7D[&RGH $FW1R RI$XJXVW KDVDGRSWHGSROLFLHVRQGHOHJDWLRQRIGRPDLQQDPHV SURYLGHVWKDWWD[UHWXUQVDQGLQGLYLGXDOGDWDRE XQGHULWVFRXQWU\FRGHWRSOHYHOGRPDLQQDPHERD WDLQHGE\WKH7D[$GPLQLVWUDWLRQVKDOOEHFRQƄGHQWLDO SROLF\ RQ UHVROXWLRQ RI GLVSXWHV FRQFHUQLQJ GRPDLQ 6XFKGDWDPD\RQO\EHXVHGIRUWD[UHODWHGSXUSRVHV QDPHV UHJLVWHUHG XQGHU WKH FRXQWU\ FRGH WRSOHYHO or relevant procedures and may not be reported, as GRPDLQ QDPH ER DQG UHJXODWLRQV WR WKH GRPDLQ VLJQHGRUFRPPXQLFDWHGWRWKLUGSDUWLHVXQOHVVWKHUH QDPHGLVSXWHUHVROXWLRQSROLF\5HFRJQL]HGSURYLGHUV LVDGXO\MXVWLƄHGFRXUWRUGHURUDUHTXHVWIRULQIRUPD RIDUELWUDWLRQVHUYLFHVDUHWKH:,320HGLDWLRQDQG$U WLRQXQGHUDUWLFOHRIWKH&RQVWLWXWLRQ$JJUHJDWHG bitration Centre and the Conciliation and Commercial RUJHQHUDOVWDWLVWLFDOLQIRUPDWLRQLVSXEOLF $UELWUDWLRQ&HQWUHRIWKH%ROLYLDQ1DWLRQDO&KDPEHURI ,QDGGLWLRQWKH)LQDQFLDO6HUYLFHV$FW $FW1R  &RPPHUFH provides that any individual or body corporate that I  &\EHUFULPHDQGLQIRUPDWLRQVHFXULW\ FRQVLGHUVWKDWWKH\KDYHEHHQLPSURSHUO\RULOOHJDOO\ SUHYHQWHGIURPNQRZLQJFKDOOHQJLQJRUREWDLQLQJWKH ,QUHJDUGWRF\EHUFULPHWKH&ULPLQDO&RGHDGRSWHG UHPRYDO RU FRUUHFWLRQ RI GDWD UHFRUGHG E\ ƄQDQFLDO E\$FW1RRI0DUFKGHƄQHVRIIHQFHV HQWLWLHV XVLQJ DQ\ SK\VLFDO HOHFWURQLF PDJQHWLF RU LQYROYLQJPDQLSXODWLRQDQGDOWHUDWLRQRI,&7V\VWHPV automated means, in public or private records or da LPSURSHUDFFHVVDQGXVHRIF\EHUGDWD7KH)LQDQFLDO WDEDQNVRUZKLFKDIIHFWKLVRUKHUIXQGDPHQWDOULJKWWR 6HUYLFHV $FW $FW 1R   GHƄQHV D QXPEHU RI RI SHUVRQDORUIDPLO\SULYDF\RUWRKLVRUKHULPDJHKRQ IHQFHV LQYROYLQJ IUDXG HPSOR\LQJ HOHFWURQLF PHDQV RXUDQGUHSXWDWLRQPD\EULQJDQDFWLRQIRUSURWHFWLRQ LQFOXGLQJPLVDSSURSULDWLRQRIIXQGV RISULYDF\DVHQYLVDJHGLQWKH&RQVWLWXWLRQ J  3HQGLQJOHJLVODWLRQDQGFKDOOHQJHV G  ,QGXVWULDODQGLQWHOOHFWXDOSURSHUW\ 2QH RI WKH PDLQ FKDOOHQJHV IDFHG E\ %ROLYLD LV WKH ,QUHJDUGWRLQWHOOHFWXDOSURSHUW\%ROLYLDKDVLQFOXGHG QHHGWRDGRSWJHQHUDOOHJLVODWLRQRQWKHLVVXHRISHU WKHSURWHFWLRQRIFRPSXWHUSURJUDPV VRIWZDUH LQLWV sonal data in order to meet its commitments in the &RS\ULJKW$FW $FW1R RI$SULODQG ,EHUR$PHULFDQ'DWD3URWHFWLRQ1HWZRUN7KHFRXQ KDVLVVXHG6XSUHPH'HFUHH1RRQUHJXODW WU\pV VXEVWDQWLYH DQG SURFHGXUDO FULPLQDO OHJLVODWLRQ LQJ FRPSXWHU DSSOLFDWLRQV DQG VRIWZDUH RI  $SULO DOVR QHHGV WR EH UHYLHZHG DQG EURXJKW XS WR GDWH 6XSUHPH'HFUHH1RRQWKHRUJDQL]HG EHDULQJ LQ PLQG WKH &RXQFLO RI (XURSHpV&RQYHQWLRQ WH[WRIWKH&ULPLQDO&RGHRI2FWREHUGHƄQHV RQ &\EHUFULPH DQG WKH ,EHUR$PHULFDQ &RRSHUDWLRQ RIIHQFHV DJDLQVW LQWHOOHFWXDO SURSHUW\ UHODWHG WR WKH $JUHHPHQWRQ5HVHDUFK8QGHUZULWLQJDQG2EWDLQLQJ UHSURGXFWLRQSODJLDU\GLVWULEXWLRQSXEOLFDWLRQWUDQV (YLGHQFHRQ&\EHUFULPHDORQJZLWKWKHUHFRPPHQ IRUPDWLRQDQGPDVVPDUNHWLQJRIFRS\ULJKWSURWHFWHG GDWLRQ RI WKH &RQIHUHQFH RI 0LQLVWHUV RI -XVWLFH RI ZRUNV ZLWKRXW WKH DXWKRUL]DWLRQ RI WKH KROGHU RI WKH ,EHUR$PHULFDQ&RXQWULHVRQWKHGHƄQLWLRQDQGSXQ FRS\ULJKW LVKPHQWRIF\EHUFULPH 16 Study on the harmonization of cyberlegislation in Latin America

%ROLYLDPXVWDOVRDGGUHVVWKHFKDOOHQJHRIWKHGLJLWDO XQDXWKRUL]HG DFFHVV XVH PRGLƄ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federal levels and the different sectors of society, and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documents, applications and support for applica LQWKLVDUHD,WVWLSXODWHVWKDWSURYLGHUVPD\QRWPDNH WLRQVWKURXJKGLJLWDOFHUWLƄFDWHVDQGVHFXUHHOHFWURQLF SHUIRUPDQFHRIFRQWUDFWVZLWKFRQVXPHUVFRQWLQJHQW WUDQVDFWLRQV,&3%UDVLOLVWKXVDXWKRUL]HGWRIRUPXODWH XSRQWKHLUDFFHSWLQJVWRUDJHRUGLVVHPLQDWLRQRIWKHLU SROLFLHVIRUPDQDJLQJERWKWKHFHUWLƄFDWLRQDXWKRULWLHV LQIRUPDWLRQ DQ\ VXFK SURYLVLRQ LV FRQVLGHUHG QXOO DQG WKH UHJLVWUDWLRQ DXWKRULWLHV 7KH 1DWLRQDO ,QVWLWXWH and void and may be sanctioned by the competent IRU,QIRUPDWLRQ7HFKQRORJ\DXQLWRIWKH0LQLVWU\RI6FL HFRQRPLF DXWKRULWLHV ,Q DGGLWLRQ WR WKH FLYLO OLDELOLW\ HQFH7HFKQRORJ\DQG,QQRYDWLRQLVDOVRHPSRZHUHG WKDWSURYLGHUVPD\LQFXUIRUQRQFRPSOLDQFHZLWKWKH WRDFWDVWKHURRWFHUWLƄFDWLRQDXWKRULW\IRUSXEOLFNH\V Code, they may also be liable to criminal prosecution if LQ%UD]LODQGWRFDUU\RXWVXSHUYLVRU\DFWLYLWLHVDVZHOO they are found to have committed any of the offences DVWRSXQLVKDQ\RQHLQIULQJLQJWKHUHJXODWLRQV HQYLVDJHGLQWKH&RGHLH L KLQGHULQJRUREVWUXFW 7KH3URYLVLRQDO0HDVXUHUHFRJQL]HVWKHIXOOOHJDOYDOLG LQJDFFHVVE\FRQVXPHUVWRDQ\SHUVRQDOLQIRUPDWLRQ ity of public or private electronic documents produced FRQWDLQHG LQ ƄOHV GDWDEDVHV IRUPDWV RU UHFRUGV XQGHU WKH FHUWLƄFDWLRQ SURFHVV RI ,&3%UDVLO ,W DOVR ZKLFK LV SXQLVKDEOH E\ LPSULVRQPHQW RI VL[ PRQWKV DOORZVIRUWKHXVHRIHOHFWURQLFGRFXPHQWVIRUWD[SXU WRRQH\HDURUE\DƄQHDQG LL IDLOXUHWRLPPHGLDWHO\ SRVHVSURYLGHGWKDWWKHUHTXLUHPHQWVRIWKHQDWLRQDO FRUUHFWFRQVXPHULQIRUPDWLRQWKDWLVLQFOXGHGLQƄOHV 7D[&RGHDUHPHW,&3%UDVLOKDVDXWKRULW\WRQHJRWLDWH databases, formats or records, when the provider is DQGDSSURYHELODWHUDOFHUWLƄFDWLRQDJUHHPHQWVFURVV aware or should be aware of such inaccuracy, which FHUWLƄFDWLRQ DJUHHPHQWV LQWHURSHUDELOLW\ DQG RWKHU LVSXQLVKDEOHE\LPSULVRQPHQWRIRQHWRVL[PRQWKV IRUPVRILQWHUQDWLRQDOFRRSHUDWLRQ RUE\DƄQH $FW1RRI-XO\UHFRJQL]HVWKHOHJDO 7KH H&RPPHUFH $FW 'HFUHH 1R   RI  YDOLGLW\RIGLJLWL]DWLRQHOHFWURQLFVWRUDJHDQGUHSURGXF 0DUFK  VHWV IRUWK WKH REOLJDWLRQV RI SURYLGHUV WLRQRISXEOLFDQGSULYDWHHOHFWURQLFRSWLFRUHTXLYDOHQW such as the duty to provide product information, in GRFXPHQWVDVZHOODVRIWKHPHDQVXVHGWRH[SORUH FOXGLQJDFRPSOHWHGHVFULSWLRQRIWKHFKDUDFWHULVWLFV FRQYHUVLRQ RI WKH UHSUHVHQWDWLRQ RI D GLJLWDOO\ FRGHG of the product, the terms of the contract and the ben GRFXPHQW 7KH H[SORUDWLRQ SURFHVV PXVW EH FDUULHG HƄWVDQGDGYDQWDJHVRIWKHSURGXFWWHFKQLFDOGDWD RXWLQRUGHUWRPDLQWDLQWKHLQWHJULW\DXWKHQWLFLW\DQGLI ZDUQLQJV RU LQVWUXFWLRQV IRU XVH DYDLODEOH RSWLRQV QHFHVVDU\WKHFRQƄGHQWLDOLW\RIGLJLWDOGRFXPHQWVDQG JXDUDQWHHVDQGFRQGLWLRQVIRUUHWXUQLQJRUH[FKDQJ WKHGLJLWDOFHUWLƄFDWHLVVXHGLQWKHFRQWH[WRI,&3%UDVLO LQJ WKH SURGXFW ,W DOVR UHTXLUHV SURYLGHUV WR VXSSO\ PXVW EH XVHG 6LPLODUO\WKH PHDQV IRU FRPPXQLFDW their contact information, such as telephone number, LQJGLJLWDOVWRUDJHGRFXPHQWVPXVWEHSURWHFWHGIURP HPDLORUDOLQNWRDIRUPVKRZLQJFRQWDFWLQIRUPDWLRQ II. REPORT ON LEGISLATION IN THE LATIN AMERICAN COUNTRIES 17

the physical address of the company and the proce JRYHUQPHQW DJHQFLHV DV ZHOO DV WKH ULJKW WR FRUUHFW GXUHIRUUHWXUQLQJWKHSURGXFWZLWKRXWOLDELOLW\IRUWKH VXFKLQIRUPDWLRQ EX\HU %UD]LO GRHV QRW KDYH D JHQHUDO ODZ RQ SURWHFWLRQ RI 7KH $FW DOVR PDNHV LW REOLJDWRU\ WR SURYLGH SURGXFW SHUVRQDOGDWDKRZHYHUGLIIHUHQWODZVSURWHFWWKHULJKW LQIRUPDWLRQ LQFOXGLQJ SULFH DYDLODELOLW\ PHWKRGV RI RILQGLYLGXDOVWRDSULYDWHOLIHLQFOXGLQJWKH&LYLO&RGH SD\PHQWDQGGHOLYHU\RSWLRQV%HIRUHWKHFRQWUDFWLV $FW 1R   RI  -DQXDU\  ZKLFK concluded and payment is applied and recorded, the UHFRJQL]HVWKHLQYLRODELOLW\RISHUVRQDOSULYDF\DQGWKH EX\HUPXVWEHJLYHQDFFHVVWRWKHFRQWUDFWKHRUVKH &RQVXPHU 3URWHFWLRQ &RGH ZKLFK LQFOXGHV VHYHUDO LVUHTXLUHGWRDFFHSWDVZHOODVWRDPHFKDQLVPIRU UXOHV RQ DFFHVV WR GDWDEDVHV RU ƄOHV RI FRQVXPHUV FRUUHFWLQJ PLVWDNHV 7KH VDOH FRQWUDFW PXVW LQFOXGH DQGRQWKHVWRUDJHDQGPDLQWHQDQFHRIVXFKƄOHV7KH the terms of acceptance, as well as the conditions for &RQVXPHU 3URWHFWLRQ &RGH VWLSXODWHV WKDW FRQVXPHU H[HUFLVLQJWKHULJKWWRRSWRXWZLWKRXWSD\LQJDSHQDOW\ data shall be made available only pursuant to an in GLYLGXDO UHTXHVW FRQFHUQLQJ D VSHFLƄF FRQVXPHU DV 7KH &LYLO )UDPHZRUN IRU WKH ,QWHUQHW LV GHVLJQHG WR the Code prohibits the supply of mass information on protect consumers in transactions conducted on PDQ\SHUVRQV7KHUHTXHVWPXVWDOVREHUHOHYDQWWRD WKH ,QWHUQHW DQG VWLSXODWHV WKDW DQ\ FODXVH WKDW HQ VSHFLƄFFRPPHUFLDOUHODWLRQVKLSSHUWDLQLQJWRDSRVVL croaches on such protection shall be null and void, EOHDJUHHPHQWEHWZHHQWKHFRQVXPHUDQGWKHSURYLGHU DV ZHOO DV DQ\ SURYLVLRQ WKDW HQWDLOV LQIULQJHPHQW RI PDNLQJWKHUHTXHVW the inviolability and secrecy of private communications RQWKH,QWHUQHWRUZKLFKLQDFRQWUDFWGRHVQRWRIIHU 7KH&LYLO)UDPHZRUNIRUWKH,QWHUQHWSURWHFWVWKHIRO WKH FRQWUDFWLQJ SDUW\ DFFHVV WR %UD]LOLDQ MXULVGLFWLRQ ORZLQJ ULJKWV RI XVHUV L  LQYLRODELOLW\ RI SULYDF\ DQG IRUWKHUHVROXWLRQRIGLVSXWHVDULVLQJIURPVHUYLFHVSUR SULYDWHOLIHHQVXULQJWKHULJKWWRSURWHFWLRQRIWKDWULJKW YLGHG LQ %UD]LO ,W DOVR SURPRWHV WKH XVH RI SDUHQWDO DQGFRPSHQVDWLRQIRUPDWHULDOGDPDJHRUPRUDOSUHM controls for the protection of minors, as well as the XGLFH UHVXOWLQJ IURP LWV YLRODWLRQ LL  LQYLRODELOLW\ RI WKH implementation of security measures and procedures ƅRZDQGVHFUHF\RI,QWHUQHWFRPPXQLFDWLRQVH[FHSW IRUPDLQWDLQLQJWKHFRQƄGHQWLDOLW\RILQIRUPDWLRQDERXW by court order, as well as the inviolability and secrecy ZKLFKWKHSURYLGHURIWKHVHUYLFHPXVWJLYHFOHDULQ RI VWRUHG SULYDWH FRPPXQLFDWLRQV H[FHSW E\ FRXUW IRUPDWLRQ ,W DOVR HQYLVDJHV LQGLYLGXDO DQG FROOHFWLYH RUGHU LLL  QRQVXVSHQVLRQ RI DQ ,QWHUQHW FRQQHFWLRQ SURWHFWLRQ PHDVXUHV ,W SURWHFWV WKH SULQFLSOH RI QHW H[FHSWZKHQDGHEWKDVEHHQFRQWUDFWHGGLUHFWO\IRU QHXWUDOLW\WKXVSURKLELWLQJDQ\DWWHPSWWREORFNPRQL LWV XVH LY  FOHDU DQG FRPSOHWH LQIRUPDWLRQ LQ VHUYLFH WRUƄOWHURUDQDO\VHWKHFRQWHQWRIGDWDSDFNDJHVLQ FRQWUDFWVGHVFULELQJLQGHWDLOWKHUHJLPHIRUSURWHFW connection with the provision, transmission, switch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ƄFHVRUHVWDEOLVKPHQWV ODZ YL FOHDUDQGFRPSOHWHLQIRUPDWLRQRQWKHFROOHF ORFDWHGLQ%UD]LO WLRQ XVH VWRUDJH KDQGOLQJ DQG SURWHFWLRQ RI XVHUVp F  3URWHFWLRQRISHUVRQDOGDWD personal data, which may only be used for purposes MXVWLI\LQJVXFKFROOHFWLRQZKHWKHUE\ODZRUDVVSHFL %UD]LOLVDPHPEHURI0(5&2685DQGRIWKH,EHUR ƄHGLQVHUYLFHFRQWUDFWV YLL H[SUHVVFRQVHQWIRUWKH $PHULFDQ 'DWD 3URWHFWLRQ 1HWZRUN 7KH )HGHUDO FROOHFWLRQXVHVWRUDJHDQGWUHDWPHQWRISHUVRQDOGDWD &RQVWLWXWLRQ HQVKULQHV WKH ULJKW WR SULYDF\ WR SULYDWH must be stated separately from the other clauses of the OLIHWRKRQRXUDQGWRRQHpVSHUVRQDOLPDJHDQGLWHQ FRQWUDFWDQG YLLL GHƄQLWLYHGHOHWLRQRISHUVRQDOGDWD VXUHVWKHULJKWWRFRPSHQVDWLRQIRUPDWHULDOGDPDJHRU H[FHSWDVSURYLGHGE\ODZ PRUDOSUHMXGLFHDULVLQJIURPDQ\YLRODWLRQRIWKDWULJKW ,W UHFRJQL]HV WKH LQYLRODELOLW\ RI WKH VHFUHF\ RI FRUUH 7KH )UDPHZRUN DOVR SURYLGHV WKDW DQ\ RSHUDWLRQ LQ VSRQGHQFH WHOHJUDSKLF FRPPXQLFDWLRQV WHOHSKRQH YROYLQJWKHFROOHFWLRQVWRUDJHSURWHFWLRQRUKDQGOLQJ information and communications, unless, in the latter of records, personal data or communications by pro case, there is a court order in connection with a crimi YLGHUVRI,QWHUQHWFRQQHFWLRQDQGDSSOLFDWLRQVLQZKLFK QDOLQYHVWLJDWLRQ,WHQVKULQHVWKHDFWLRQRIKDEHDVGDWD at least one of those actions occurs on the national which entitles a person to receive information on his WHUULWRU\PXVWFRPSO\ZLWK%UD]LOLDQOHJLVODWLRQDVZHOO RUKHUSHUVRQDOGDWDWKDWLVLQUHFRUGVRUGDWDEDQNVRI DVZLWKWKHULJKWVWRSULYDF\DQGSURWHFWLRQRISHUVRQDO 18 Study on the harmonization of cyberlegislation in Latin America

data and secrecy of private communications and of re $FW1RLQFOXGHVWKHRIIHQFHRIqLQYDVLRQRI FRUGV DQ,7GHYLFHrDQGSURYLGHVVDQFWLRQVIRUDQ\RQHZKR LQYDGHVDQ,7GHYLFHZKHWKHURUQRWLWLVFRQQHFWHG G  ,QGXVWULDODQGLQWHOOHFWXDOSURSHUW\ WR WKH ,QWHUQHW E\ ZURQJIXOO\ GLVDEOLQJ D VHFXULW\ 7KH 6RIWZDUH $FW $FW 1R   RI  )HEUXDU\ mechanism, in order to obtain, manipulate or destroy OD\VGRZQUXOHVWRSURWHFWFRPSXWHUSURJUDPV GDWDRULQIRUPDWLRQZLWKRXWWKHH[SUHVVRUWDFLWDX DVZRUNVFRYHUHGE\FRS\ULJKWODZDQGHVWDEOLVKHV WKRUL]DWLRQRIWKHRZQHURIWKHGHYLFHRUE\LQVWDOOLQJ DPRQJRWKHUWKLQJVFRQGLWLRQVIRUWKHLUPDUNHWLQJLQ YXOQHUDELOLWLHVLQRUGHUWRREWDLQDQLOOLFLWDGYDQWDJH %UD]LO,WDOVRHVWDEOLVKHVWKHJXDUDQWHHVWKDWDFRS\ 7KH $FW DOVR SURYLGHV SHQDOWLHV IRU DQ\RQH ZKR ULJKWKROGHUPXVWJLYHWRXVHUVRIWKHVRIWZDUHDVZHOO produces, offers, distributes, sells or disseminates DVWKHDSSOLFDEOHSHQDOWLHVIRUYLRODWLQJWKH$FW FRPSXWHUGHYLFHVRUSURJUDPVLQRUGHUWRHQDEOHWKH ,QWKHLQWHUQDWLRQDOVSKHUH%UD]LOKDVVLJQHGWKHIRO DIRUHPHQWLRQHGEHKDYLRXUV3HQDOWLHVDUHLQFUHDVHG ORZLQJLQVWUXPHQWVRQLQWHOOHFWXDOSURSHUW\ LIWKHLQYDVLRQUHVXOWVLQHFRQRPLFORVV,WDOVRSXQ ishes anyone who receives commercial or industrial • :,32 &RS\ULJKW 7UHDW\ DQG :,32 3HUIRUPDQFHV VHFUHWV RU SULYDWH FRQWHQW DV D UHVXOW RI GLVDEOLQJ DQG3KRQRJUDPV7UHDW\ WKH FRPSXWHU HTXLSPHQWpV VHFXULW\ PHFKDQLVP 7KHDIRUHPHQWLRQHGRIIHQFHVDUHDJJUDYDWHGLIWKH\ • %HUQH &RQYHQWLRQ IRU WKH 3URWHFWLRQ RI /LWHUDU\ DUHFRPPLWWHGDJDLQVWSXEOLFRIƄFLDOVLQFOXGLQJWKH DQG$UWLVWLF:RUNV SUHVLGHQW JRYHUQRUV DQG RWKHU RIƄFLDOV DW WKH IHG • &RQYHQWLRQ IRU WKH 3URWHFWLRQ RI 3URGXFHUV RI HUDOVWDWHRUPXQLFLSDOOHYHO 3KRQRJUDPV$JDLQVW8QDXWKRUL]HG'XSOLFDWLRQRI :LWKUHJDUGWRLQIRUPDWLRQVHFXULW\WKH&LYLO)UDPH 7KHLU3KRQRJUDPV *HQHYD&RQYHQWLRQ ZRUN IRU WKH ,QWHUQHW LV GHVLJQHG WR JXDUDQWHH QHW • ,QWHUQDWLRQDO&RQYHQWLRQIRUWKH3URWHFWLRQRI3HU neutrality and preserve stability, security and func IRUPHUV 3URGXFHUV RI 3KRQRJUDPV DQG %URDG WLRQDOLW\ ,Q SURYLGLQJ ,QWHUQHW FRQQHFWLYLW\ VHUYLFHV FDVWLQJ2UJDQL]DWLRQV 5RPH&RQYHQWLRQ V\VWHPDGPLQLVWUDWRUVPXVWNHHSFRQQHFWLRQUHFRUGV IRURQH\HDULQDFRQWUROOHGVHFXUHDQGFRQƄGHQWLDO • $JUHHPHQWRQ7UDGH5HODWHG$VSHFWVRI,QWHOOHF HQYLURQPHQW7KHODZHQIRUFHPHQWRUDGPLQLVWUDWLYH WXDO3URSHUW\5LJKWV 75,36 DGPLQLVWHUHGE\:72 DXWKRULWLHVRUWKH3XEOLF3URVHFXWLRQ6HUYLFHDUHHP H  'RPDLQQDPHV SRZHUHGWRUHTXLUHDVDSUHFDXWLRQDU\PHDVXUHWKDW UHFRUGVEHNHSWIRUDORQJHUWLPH3URYLGHUVRI,QWHUQHW :LWKUHVSHFWWRWKHGRPDLQQDPHEUIRU%UD]LO1,& applications must also maintain the relevant records EU WKH H[HFXWLYH DUP RI WKH ,QWHUQHW 0DQDJHPHQW RIDFFHVVWR,QWHUQHWDSSOLFDWLRQVIRUVL[PRQWKVLQ &RPPLWWHH &*,EU LVUHVSRQVLEOHIRUUHJLVWHULQJDQG D FRQWUROOHG VHFXUH DQG FRQƄGHQWLDO HQYLURQPHQW PDLQWDLQLQJEUGRPDLQQDPHVDVZHOODVIRUDVVLJQ /DZHQIRUFHPHQWRUDGPLQLVWUDWLYHDXWKRULWLHVRUWKH LQJ DXWRQRPRXV V\VWHP QXPEHUV DQG ,3Y RU ,3Y 3XEOLF3URVHFXWLRQ6HUYLFHPD\UHTXLUHDVDSUHFDX addresses in the country, which are coordinated by WLRQDU\PHDVXUHWKDWUHFRUGVRIDFFHVVWR,QWHUQHW WKH/DWLQ$PHULFDQDQG&DULEEHDQ$GGUHVVHV5HJLV DSSOLFDWLRQVEHNHSWIRUDORQJHUSHULRGRIWLPH WU\ 3URYLGHUVRI,QWHUQHWFRQQHFWLRQVVKDOOQRWEHFLYLOO\ 1,&EU KDV DQ DGPLQLVWUDWLYH GRPDLQQDPH GLVSXWH OLDEOHIRUGDPDJHFDXVHGE\FRQWHQWJHQHUDWHGE\ resolution process, under which rules are set for WKLUGSDUWLHV3URYLGHUVRI,QWHUQHWDSSOLFDWLRQVPD\ UHVROYLQJ GLVSXWHV EHWZHHQ WKH RZQHU RI D GRPDLQ EHKHOGOLDEOHIRUGDPDJHFDXVHGE\FRQWHQWJHQHU QDPHDQGDQ\WKLUGSDUW\ZKRLPSXJQVWKHOHJLWLPDF\ DWHG E\ WKLUG SDUWLHV RQO\ LI SXUVXDQW WR D VSHFLƄF RIWKHGRPDLQUHJLVWUDWLRQ$UELWUDWLRQVHUYLFHVDUHSUR FRXUWRUGHUWKH\IDLOWRWDNHVWHSVZLWKLQWKHWHFKQL YLGHGE\WKH%UD]LOLDQ,QWHOOHFWXDO3URSHUW\$VVRFLDWLRQ cal limits of their service and within the time frame WKH&DQDGD%UD]LO&KDPEHURI&RPPHUFHDQG:,32 DVVLJQHGWRPDNHDYDLODEOHWKHFRQWHQWZKLFKKDV EHHQLGHQWLƄHGDVLQYLRODWLRQ I  &\EHUFULPHDQGLQIRUPDWLRQVHFXULW\ J  3HQGLQJOHJLVODWLRQDQGFKDOOHQJHV 7RGHDOZLWKF\EHUFULPH$FW1RDQG$FW1R ERWKGDWHG1RYHPEHUDPHQGLQJ The most important bills currently under discussion in WKH&ULPLQDO&RGHGHƄQHRIIHQFHVDJDLQVWFRPSXWHU WKHOHJLVODWXUHDUHWKHSURSRVHGJHQHUDODFWRQGDWD and related systems that are perpetrated with elec SURWHFWLRQRIDQGVHYHUDODPHQGPHQWVWRFULP WURQLFGLJLWDORUVLPLODUGHYLFHV LQDOSURFHGXUDOODZGHVLJQHGWREULQJLWLQOLQHZLWKWKH II. REPORT ON LEGISLATION IN THE LATIN AMERICAN COUNTRIES 19

&RXQFLORI(XURSHpV&RQYHQWLRQRQ&\EHUFULPH7KH VLJQHG ZLWK DQ DGYDQFHG HOHFWURQLF VLJQDWXUH ZKLOH QHHGWRFORVHWKHGLJLWDOJDSHVSHFLDOO\LQWHUPVRIWKH $FW1RLQWURGXFHGWKHFRQFHSWRIHOHFWURQLF ODFNRI,&7FDSDFLWLHVLVRQHRIWKHPDLQFKDOOHQJHV GDWHV IDFLQJ%UD]LO ,Q DGGLWLRQ WKH $FW RQ %DVHV IRU $GPLQLVWUDWLYH 3URFXUHPHQW &RQWUDFWV $FW 1R   UHTXLUHV CHILE JRYHUQPHQW HQWLWLHV WR REWDLQ HVWLPDWHV LVVXH WHQ GHUV KLUH SHUVRQQHO DZDUG FRQWUDFWV UHTXHVW &KLOHKDVGLIIHUHQWW\SHVRIODZVRQHFRPPHUFHLQ clearance and carry out all procurement transactions SDUWLFXODUWKH$FWRQ(OHFWURQLF'RFXPHQWV(OHFWURQLF DQGFRQWUDFWVIRUJRRGVWKURXJKHOHFWURQLFV\VWHPV 6LJQDWXUHVDQG(OHFWURQLF6LJQDWXUH&HUWLƄFDWLRQ6HU DXWKRUL]HG E\ WKH 2IƄFH RI 3XEOLF 3URFXUHPHQW DQG YLFHV $FW 1R   RI  0DUFK  DQG $FW &RQWUDFWLQJRQHLWKHURSHQRUFORVHGQHWZRUNVXVLQJ 1R  DPHQGLQJ WKH DIRUHPHQWLRQHG $FW DQG HFRPPHUFHSODWIRUPVRUGLJLWDOWUDQVDFWLRQPDUNHWV WKH&RGHRI&LYLO3URFHGXUHRI1RYHPEHU ,W DOVR FUHDWHV DQ RIƄFLDO HOHFWURQLF UHJLVWU\ LQ ZKLFK 2WKHULPSRUWDQWOHJLVODWLRQLVWKH&RQVXPHU3URWHFWLRQ DOO TXDOLƄ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ƄFDWLRQ FDOO\ JHQHUDWHG GRFXPHQWV YDULRXV OHJDO SURYLVLRQV VHUYLFHV LQ &KLOH   LV EDVHG RQ D QXPEHU RI KDYHEHHQSXWLQSODFHRUPRGLƄ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ƄFDWHVLQWD[UHODWHG DVDQGOHJDOO\HTXLYDOHQWWRZULWWHQFRQWUDFWV6XFK PDWWHUV LLL $FW1RRI'HFHPEHU DFWVDQGFRQWUDFWVDUHFRQVLGHUHGHTXLYDOHQWWRWKRVH ZKLFK UHJXODWHV WUDQVIHUV DQG VWLSXODWHV WKDW FRSLHV PDGHLQZULWLQJLQFDVHVZKHUHWKHODZUHTXLUHVWKDW RILQYRLFHVVKDOOKDYHWKHVDPHYDOLGLW\DVWKHRULJLQDO WKH\EHLQZULWWHQIRUP LQYRLFHV LY ([HPSW5HVROXWLRQ1RRIWKH,QWHUQDO 7D[6HUYLFHRI6HSWHPEHUZKLFKHVWDEOLVKHV $FW1RDXWKRUL]HV6WDWHHQWLWLHVWRH[HFXWHRU WKHVWDQGDUGVDQGSURFHGXUHVIRUDXWKRUL]HGWD[SD\ carry out acts, enter into contracts and issue docu HUV WR LVVXH HOHFWURQLF LQYRLFHV DQG Y  'HFUHH/DZ PHQWV ZLWKLQ WKHLU VSKHUH RI FRPSHWHQFH DQG VLJQ RQWKH7D[&RGHRI'HFHPEHUDQGXS WKHPZLWKHOHFWURQLFVLJQDWXUHV,WDOVRVHWVIRUWKWKH GDWHGWR0D\ZKLFKDXWKRUL]HVWKHƄOLQJRI REOLJDWLRQVRIFHUWLƄFDWLRQVHUYLFHSURYLGHUVDVZHOODV GRFXPHQWVLQIRUPVRWKHUWKDQKDUGFRS\ WKHUHTXLUHPHQWVIRUHOHFWURQLFVLJQDWXUHFHUWLƄFDWLRQ DQG WKH ULJKWV DQG REOLJDWLRQV RI XVHUV RI HOHFWURQLF The automation of various procedures by the Na VLJQDWXUHV WLRQDO &XVWRPV 6HUYLFH LV DOVR ZRUWK PHQWLRQLQJ 7KHVH DUUDQJHPHQWV VWUHDPOLQH FXVWRPV FOHDUDQFHV 'HFUHHUHJXODWLQJ$FW1RRI$XJXVW E\ WUDQVPLWWLQJ LQIRUPDWLRQ YLD UHPRWH PHDQV DQG OD\VGRZQPRUHGHWDLOHGUXOHVIRUSURYLGHUVRI SURYLGLQJ IRU LWV FRUUHVSRQGLQJ YDOLGDWLRQ LQ YDULRXV FHUWLƄFDWLRQ VHUYLFHV DQG WKH FHUWLƄFDWLRQ SURFHVV GDWDEDVHV7KHSDUWLFLSDWLRQRI&KLOHLQ$3(&:72 SURWHFWLRQIRUWKHULJKWVRIXVHUVDQGWKHXVHRIHOHF DQGWKH:RUOG&XVWRPV2UJDQL]DWLRQKDVEHHQDPD WURQLFVLJQDWXUHVE\6WDWHDJHQFLHV,WDOVRHVWDEOLVKHV MRUIRUFHLQHIIRUWVWRPRGHUQL]HWKHFRXQWU\pVFXVWRPV WHFKQLFDOVWDQGDUGVIRUGLJLWDOFHUWLƄFDWHVWLPHVWDPSV VHUYLFH 7KH PRVW LPSRUWDQW UHJXODWRU\ SURYLVLRQV LQ DQGPRELOHVLJQDWXUHVHUYLFHV WKLVDUHDLQFOXGH$FW1RDPHQGLQJWKH&XV $FW1R  DPHQGLQJ WKH&RGHRI&LYLO 3URFH WRPV2UGLQDQFHDQGWKH2UJDQLF$FWRIWKH1DWLRQDO dure, provides for the inclusion of additional proof &XVWRPV6HUYLFHRI1RYHPEHUZKLFKVHWV of authenticity for electronic documents that are not PDQDJHPHQW DQG SHUVRQQHO VWDQGDUGV DQG 'H FUHHZLWKWKH)RUFHRI/DZ1RRI-XQH  $VWDWHLQWKH8QLWHG6WDWHVRI$PHULFD whereby the National Customs Service implements a 20 Study on the harmonization of cyberlegislation in Latin America

V\VWHP RI HOHFWURQLF SD\PHQW IRU GXWLHV WD[HV IHHV OHVV WKDW LV DXWKRUL]HG E\ ODZ WKH GDWD VXEMHFW KDV DQGRWKHUSD\PHQWVUHFHLYHGE\WKH6HUYLFH consented or the information is needed in order to GHWHUPLQHRUJUDQWKHDOWKEHQHƄWVWRWKHGDWDVXEMHFW E  &RQVXPHUSURWHFWLRQ 7KH$FWHQVKULQHVWKHULJKWRISHUVRQVWREHSURYLGH ,QWKHDUHDRIHFRPPHUFHWKH&RQVXPHU3URWHFWLRQ PRGLI\ FDQFHO RU EORFN WKHLU SHUVRQDO LQIRUPDWLRQ $FW $FW1R UHTXLUHVSURYLGHUVWRJLYHWKHLU within the limits of national security or the national in SRVWDO RU HPDLO DGGUHVV DQG H[SODLQ ZKDW WHFKQLFDO WHUHVW means it provides for consumers to identify and cor UHFW HUURUV LQ VKLSPHQWV RU LQ SHUVRQDO GDWD ,W DOVR 7KH $FW SURYLGHV WKDW LQGLYLGXDOV RU SULYDWHVHFWRU VWLSXODWHVWKDWSURPRWLRQDODQGDGYHUWLVLQJFRPPXQL OHJDOHQWLWLHVRUSXEOLFDJHQFLHVWKDWDUHUHVSRQVLEOH FDWLRQVVHQWE\HPDLOPXVWLQFOXGHWKHVXEMHFWPDWWHU IRUSHUVRQDOGDWDEDQNVVKDOOPDNHFRPSHQVDWLRQIRU of the communication, the identity of the sender and PDWHULDOGDPDJHDQGPRUDOSUHMXGLFHFDXVHGE\WKH DYDOLGDGGUHVVDWZKLFKWKHUHFLSLHQWFDQUHTXHVWWKDW improper treatment of personal information, without shipments be suspended, after which time they shall SUHMXGLFH WR WKHLU SURFHHGLQJ WR HOLPLQDWH PRGLI\ RU EHSURKLELWHG EORFNWKHGDWDDVUHTXHVWHGE\WKHGDWDVXEMHFWRUDV the case may be, as ordered by the court that is com F  3URWHFWLRQRISHUVRQDOGDWD SHWHQWWRHVWDEOLVKWKHDPRXQWRIFRPSHQVDWLRQ7KH 7KH3ROLWLFDO&RQVWLWXWLRQRI&KLOHUHFRJQL]HVWKHULJKW $FWGRHVQRWGHVLJQDWHDQ\DGPLQLVWUDWLYHDXWKRULW\LQ WRSULYDF\DQGWRSHUVRQDODQGIDPLO\KRQRXU,WDOVR FKDUJHRIHQIRUFLQJWKHODZDOWKRXJKLWGRHVFRQIHU HQVKULQHVWKHULJKWWRLQYLRODELOLW\RIDOOIRUPVRISULYDWH SRZHUVRQWKHMXGLFLDU\WRLQVXPPDU\SURFHHGLQJV communication and prohibits the interception, open RUGHUFRPSOLDQFHZLWKWKH$FWDQGSXQLVKQRQFRP LQJRUUHFRUGLQJRIFRPPXQLFDWLRQVH[FHSWLQFDVHV SOLDQFHZLWKLWVGHFLVLRQV H[SUHVVO\HQYLVDJHGE\ODZ,QDGGLWLRQWRWKHSURWHF G  ,QGXVWULDODQGLQWHOOHFWXDOSURSHUW\ tion provided by the Constitution, a number of laws VDIHJXDUGSHUVRQDOSULYDF\LQFOXGLQJWKH3ULYDF\3UR 7KH ,QWHOOHFWXDO 3URSHUW\ $FW $FW 1R   RI  WHFWLRQ$FW $FW1R RI$XJXVWDV 2FWREHU  SURWHFWV FRPSXWHU SURJUDPV DQG DPHQGHGE\$FW1RRI-XQHZKLFK FRPSLODWLRQVRIGDWDWKURXJKRXWWKHOLIHRIWKHDXWKRU UHJXODWHV WKH KDQGOLQJ E\ SXEOLF DQG SULYDWH HQWLWLHV DQGXSWR\HDUVWKHUHDIWHUUHFNRQHGIURPWKHGDWH RISHUVRQDOGDWDFRQWDLQHGLQUHFRUGVDQGGDWDEDVHV RIKLVRUKHUGHDWK

7KH $FW SURWHFWV LQGLYLGXDOV ZKRVH SHUVRQDO GDWD $FW 1R  DPHQGLQJ WKH ,QWHOOHFWXDO 3URSHUW\ are to be used in any operation or set of operations $FW $FW1R RI$SULOLQWURGXFHVIRU or technical procedures, whether automated or not, WKHƄUVWWLPHLQWKHUHJLRQDqVDIHKDUERXUrV\VWHP WKDW HQWDLO FROOHFWLQJ VWRULQJ UHFRUGLQJ RUJDQL]LQJ VROHO\ IRU FRS\ULJKW LVVXHV ZKHUHE\ D qQRWLFH DQG SURFHVVLQJ VHOHFWLQJ H[WUDFWLQJ FRPSDULQJ LQWHU WDNHGRZQr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

,WDOVRSURWHFWVSHUVRQDOLQIRUPDWLRQRUGDWDWKLVEH 8QGHU WKH qVDIH KDUERXUr PRGHO SURYLGHUV RI WHOH LQJ XQGHUVWRRG DV GDWD UHIHUULQJ WR DQ\ LQIRUPDWLRQ FRPPXQLFDWLRQVDQG,QWHUQHWVHUYLFHVZKR L GRQRW FRQFHUQLQJLGHQWLƄHGRULGHQWLƄDEOHLQGLYLGXDOV,WOD\V LQLWLDWHWUDQVPLVVLRQRIPDWHULDOVWKDWYLRODWHWKHODZ LL  GRZQ IXUWKHU PHDVXUHV IRU SURWHFWLQJ VHQVLWLYH SHU GRQRWH[HUFLVHHGLWRULDOFRQWURORYHUVXFKPDWHULDOV VRQDOGDWDGHƄQHGDVGDWDWKDWUHIHUWRWKHSK\VLFDORU LLL KDYHQRNQRZOHGJHRIWKHLOOLFLWQDWXUHRIWKHPDWHUL moral characteristics of persons or to facts or circum DOVWKDWYLRODWHWKHODZRU LY TXLFNO\UHPRYHEORFNRU stances of their private lives, such as their personal SUHYHQWDFFHVVWRPDWHULDOVWKDWYLRODWHWKHODZ QRWLI\ KDELWV UDFLDO RULJLQ LGHRORJ\ DQG SROLWLFDO RSLQLRQV DQGWDNHGRZQSURFHGXUH VKDOOQRWEHUHVSRQVLEOHIRU UHOLJLRXVEHOLHIVRUFRQYLFWLRQVVWDWHRIWKHLUSK\VLFDO PDWHULDOVWKH\WUDQVPLWURXWHVWRUHOLQNRUUHIHUHQFH RUPHQWDOKHDOWKDQGWKHLUVH[XDOLW\7KH$FWVWLSXODWHV DQGVKDOOEHH[HPSWIURPWKHREOLJDWLRQWRVXSHUYLVH WKDWVHQVLWLYHGDWDPD\QRWEHVXEMHFWWRKDQGOLQJXQ or monitor such materials, as well as from the obli II. REPORT ON LEGISLATION IN THE LATIN AMERICAN COUNTRIES 21

JDWLRQ WR DFWLYHO\ VHDUFK IRU IDFWV RU FLUFXPVWDQFHV WKH&/'RPDLQ1DPH'LVSXWH5HVROXWLRQ3ROLF\$OO WKDW PLJKW VXJJHVW RU LQGLFDWH WKH H[LVWHQFH RI LOOLFLW disputes are submitted, resolved and processed in DFWLYLWLHV accordance with the arbitration procedure laid down LQWKDWSROLF\ZKLFKHPSRZHUWKH&/'LVSXWH5HVR 7KHqVDIHKDUERXUrUHJLPHQLQ&KLOHDQODZPHHWVWKH OXWLRQ&HQWUHWRDFWDVWKHXQLWRI1,&&KLOHLQFKDUJH VWDQGDUGVVHWIRUWKLQWKHMRLQWGHFODUDWLRQRQIUHHGRP RIDGPLQLVWHULQJWKH&/GRPDLQQDPHGLVSXWHUHVR RIH[SUHVVLRQDQGWKH,QWHUQHWRI-XQHLVVXHG OXWLRQ V\VWHP 1,& &KLOH GRHV QRW SDUWLFLSDWH DW WKH E\WKH8QLWHG1DWLRQV6SHFLDO5DSSRUWHXURQIUHHGRP DUELWUDWLRQ VWDJH H[FHSW WR DSSRLQW WKH DUELWUDWRU LQ RI RSLQLRQ DQG H[SUHVVLRQ WKH 2UJDQL]DWLRQ IRU 6H accordance with established procedure and to imple FXULW\DQG&RRSHUDWLRQLQ(XURSH5HSUHVHQWDWLYHRQ PHQWWKHDUELWUDWLRQDZDUG )UHHGRPRIWKH0HGLDWKH2$66SHFLDO5DSSRUWHXU RQIUHHGRPRIH[SUHVVLRQDQGWKH$IULFDQ&RPPLVVLRQ I  &\EHUFULPHDQGLQIRUPDWLRQVHFXULW\ RQ +XPDQ DQG 3HRSOHVp 5LJKWV 6SHFLDO 5DSSRUWHXU RQIUHHGRPRIH[SUHVVLRQDQGDFFHVVWRLQIRUPDWLRQ ,QWHUPVRIFULPLQDOODZWKH&\EHUFULPH$FW $FW1R   RI  -XQH  GHƄQHV WKH RIIHQFHV RI L  7KH UHJXODWLRQV WR WKH ,QWHOOHFWXDO 3URSHUW\ $FW $FW F\EHUVDERWDJHZKLFKLQYROYHVGHVWUR\LQJRUUHQGHU 1R RI$SULOLQFOXGHSURYLVLRQVRQ LQJ XVHOHVV DQ LQIRUPDWLRQSURFHVVLQJ V\VWHP RU LWV WKHDSSRLQWPHQWRIDUHSUHVHQWDWLYHRI,QWHUQHWVHUYLFH SDUWVRUFRPSRQHQWVRULPSHGLQJREVWUXFWLQJRUDO SURYLGHUVWRUHFHLYHMXGLFLDOQRWLƄFDWLRQV WHULQJWKHLUIXQFWLRQVtDQRIIHQFHZKRVHVHULRXVQHVV &KLOHKDVUDWLƄHGWKHIROORZLQJLQWHUQDWLRQDOLQVWUXPHQWV LQFUHDVHVZKHQGDWDDUHDIIHFWHG LL F\EHUHVSLRQDJH RQWKHULJKWWRLQWHOOHFWXDODQGLQGXVWULDOSURSHUW\ ZKLFKFRQVLVWVRILQWHUFHSWLQJLQWHUIHULQJZLWKRUDF • %HLMLQJ7UHDW\RQ$XGLRYLVXDO3HUIRUPDQFHV  FHVVLQJDQLQIRUPDWLRQSURFHVVLQJV\VWHPWRFRQWURO XWLOL]H RU LPSURSHUO\ JDLQ NQRZOHGJH RI LQIRUPDWLRQ • :,32 &RS\ULJKW 7UHDW\ DQG :,32 3HUIRUPDQFHV FRQWDLQHG WKHUHLQ LLL  DOWHUDWLRQ RI GDWD ZKLFK LQ DQG3KRQRJUDPV7UHDW\ FOXGHVGHVWUR\LQJRUFDXVLQJGDPDJHWRWKHPDQG LY  • 3DULV &RQYHQWLRQ IRU WKH 3URWHFWLRQ RI ,QGXVWULDO UHYHDOLQJRUGLVVHPLQDWLQJZLWKRXWDXWKRUL]DWLRQGDWD 3URSHUW\  FRQWDLQHGLQDQLQIRUPDWLRQSURFHVVLQJV\VWHP • %HUQH &RQYHQWLRQ IRU WKH 3URWHFWLRQ RI /LWHUDU\ DQG$UWLVWLF:RUNV 7KH *HQHUDO 7HOHFRPPXQLFDWLRQV $FW $FW 1R   RI  2FWREHU  UHTXLUHV FRQFHVVLRQ &RQYHQWLRQ IRU WKH 3URWHFWLRQ RI 3URGXFHUV RI • DLUHVDQGSURYLGHUVRI,QWHUQHWDFFHVVWRPDNHHYHU\ 3KRQRJUDPV$JDLQVW8QDXWKRUL]HG'XSOLFDWLRQRI effort to preserve the privacy of users, provide pro 7KHLU3KRQRJUDPV *HQHYD&RQYHQWLRQ WHFWLRQDJDLQVWYLUXVHVDQGHQVXUHWKHVHFXULW\RIWKH • ,QWHUQDWLRQDO&RQYHQWLRQIRUWKH3URWHFWLRQRI3HU QHWZRUN,WDOVRGHƄQHVDVRIIHQFHVZKLFKWKHSURV IRUPHUV 3URGXFHUV RI 3KRQRJUDPV DQG %URDG HFXWRUFDQDFWRQH[RIƄFLR L PDOLFLRXVO\LQWHUIHULQJ FDVWLQJ2UJDQL]DWLRQV 5RPH&RQYHQWLRQ ZLWKLQWHUFHSWLQJRULQWHUUXSWLQJDWHOHFRPPXQLFDWLRQ • :,323DWHQW&RRSHUDWLRQ7UHDW\ service, which is punishable with a short prison sen • $JUHHPHQWRQ7UDGH5HODWHG$VSHFWVRI,QWHOOHF WHQFHRIDQ\OHQJWKDQGFRQƄVFDWLRQRIHTXLSPHQWDQG WXDO3URSHUW\5LJKWV 75,36 DGPLQLVWHUHGE\:72 IDFLOLWLHV DQG LL  PDOLFLRXVO\ RU VHULRXVO\ LQWHUFHSWLQJ RU FDSWXULQJ ZLWKRXW SURSHU DXWKRUL]DWLRQ DQ\ W\SH H  'RPDLQQDPHV RI VLJQDO HPLWWHG WKURXJK D SXEOLF WHOHFRPPXQLFD 7KH&RPSXWHU6FLHQFH'HSDUWPHQWRIWKH8QLYHUVLW\ tion service, which is punishable with a short prison RI&KLOHKDVEHHQGHOHJDWHGE\WKH,QWHUQDWLRQDO$V VHQWHQFHRIPHGLXPOHQJWKDQGDƄ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ƄQLWLRQVDQGLQQR VWDELOLW\VHFXULW\DQGLQWHURSHUDELOLW\RIWKH,QWHUQHW YDWLRQVLQWKHFRPSODLQWSURFHGXUHVRDVWRH[SHGLWH 'LVSXWHVDULVLQJDVDUHVXOWRIWKHUHYRFDWLRQRIDFO SURFHVVLQJ 2QH RI WKH PDLQ FKDOOHQJHV WKDW QHHGV domain name must be resolved in accordance with WREHDGGUHVVHGLQ&KLOHDQOHJLVODWLRQLVWKHPDWWHURI 22 Study on the harmonization of cyberlegislation in Latin America

GHVLJQDWLQJ DQ DGPLQLVWUDWLYH DXWKRULW\ WR JXDUDQWHH PHUFHLVQRORQJHULQFKDUJHRIDXWKRUL]LQJFHUWLƄFDWLRQ WKHSURWHFWLRQRIGDWD entities, which are now accredited by the National $FFUHGLWDWLRQ $JHQF\ RI &RORPELD $FFUHGLWDWLRQ RI COLOMBIA FHUWLƄFDWLRQHQWLWLHVLVDOVRJRYHUQHGE\'HFUHH RIWKHVSHFLƄFDFFUHGLWDWLRQFULWHULDWREHLVVXHG 6HYHUDOSURYLVLRQVLQUHJXODWRU\IUDPHZRUNRI&RORP E\WKH1DWLRQDO$FFUHGLWDWLRQ$JHQF\DUHSHQGLQJDV ELDUHFRJQL]HWKHXVHRIGDWDPHVVDJHVDQGHOHFWURQLF RIWKLVZULWLQJ7KH2IƄFHRIWKH6XSHULQWHQGHQWRI,Q PHDQVLQSDUWLFXODUHOHFWURQLF,QWKHDUHDRIHOHFWURQLF GXVWU\DQG&RPPHUFHLVVWLOOUHVSRQVLEOHIRURYHUVLJKW WUDQVDFWLRQVDQGHOHFWURQLFVLJQDWXUHV$FW1R RIGLJLWDOFHUWLƄFDWLRQSURFHGXUHV RI$XJXVWNQRZQDVWKHH&RPPHUFH$FW incorporates a number of provisions from the UN $FW1RRI-XO\EHDUVRQDGPLQLVWUDWLYH &,75$/ 0RGHO /DZ RQ (OHFWURQLF &RPPHUFH DQG PDWWHUVFRQWDLQLQJSURYLVLRQVWRUDWLRQDOL]HDGPLQLV (OHFWURQLF6LJQDWXUHV7KH$FWDXWKRUL]HVWKHXVHRI trative procedures and formalities in State entities and GDWD PHVVDJHV LQ HOHFWURQLFDOO\ H[HFXWHG FRPPHU in private entities that carry out public functions or pro FLDORSHUDWLRQVDQGFRYHUVDPRQJRWKHUWKLQJVWKH YLGHSXEOLFVHUYLFHV,WLQFOXGHVDQXPEHURIPHDVXUHV DXWKHQWLFLW\ LQWHJULW\ RULJLQDOLW\ DQG SUHVHUYDWLRQ RI to facilitate the relationship between private persons HOHFWURQLFGRFXPHQWV DQGJRYHUQPHQWDVZHOODVYDULRXVJXLGLQJSULQFLSOHV D  (OHFWURQLFWUDQVDFWLRQVHOHFWURQLFVLJQDWXUHV for policy in the areas of rationalization, standardiza tion and automation of procedures to prevent the ,Q WKH DUHD RI HOHFWURQLF WUDQVDFWLRQV DQG HOHFWURQLF LPSRVLWLRQRIXQMXVWLƄHGUHTXLUHPHQWVRQXVHUV6XFK VLJQDWXUHV$FW1RRI$XJXVWNQRZQ PHDVXUHVLQFOXGHHQKDQFLQJWHFKQRORJ\WRFRRUGLQDWH DV WKH H&RPPHUFH $FW LQFRUSRUDWHV D QXPEHU RI the actions of public administration and reduce the SURYLVLRQV IURP WKH 81&,75$/ 0RGHO /DZ RQ (OHF WLPHDQGFRVWRIIRUPDOLWLHVWRXVHUV7KH\DOVRSURYLGH WURQLF&RPPHUFHDQG(OHFWURQLF6LJQDWXUHV7KH$FW LQFHQWLYHVIRUWKHXVHRILQWHJUDWHGWHFKQRORJLFDOWRROV DXWKRUL]HVWKHXVHRIGDWDPHVVDJHVLQHOHFWURQLFDOO\ WRWKLVHQGWKH$GPLQLVWUDWLYH'HSDUWPHQWRI3XEOLF H[HFXWHGFRPPHUFLDORSHUDWLRQVDQGFRYHUVDPRQJ Service is authorized to oversee, in coordination with RWKHUWKLQJVWKHDXWKHQWLFLW\LQWHJULW\RULJLQDOLW\DQG WKH0LQLVWU\RI,QIRUPDWLRQDQG&RPPXQLFDWLRQ7HFK SUHVHUYDWLRQRIHOHFWURQLFGRFXPHQWV QRORJ\WKHWHFKQLFDOVXSSRUWQHHGHGE\JRYHUQPHQW 7KH$FWDOVRUHFRJQL]HVWKHXVHDQGHYLGHQWLDOYDOXHRI DJHQFLHV (OHFWURQLF LQYRLFLQJ LV RQH RI WKH VHUYLFHV GLJLWDOVLJQDWXUHVEDFNHGE\GLJLWDOFHUWLƄFDWHVLVVXHG WKDWLVEDVHGRQWKLV$FW E\FHUWLƄFDWLRQVHUYLFHSURYLGHUV5HJXODWLRQVUHODWLQJ WR WKLV OHJLVODWLRQ KDYH EHHQ LVVXHG UHFHQWO\HJ LQ $V UHJDUGV HJRYHUQPHQW $FW  RI  -DQX 'HFUHHRI1RYHPEHUFRYHULQJHOHF DU\RQWKH&RGHRI$GPLQLVWUDWLYH3URFHGXUH WURQLFVLJQDWXUHVDVDPHFKDQLVPHTXLYDOHQWWRZULWWHQ LQFOXGHV D VHSDUDWH FKDSWHU ,,,  RQ HOHFWURQLF DG VLJQDWXUHVWKDWLVPRUHƅH[LEOHWKDQGLJLWDOVLJQDWXUHV PLQLVWUDWLYH SURFHGXUH 7KLV OHJLVODWLRQ SURYLGHV IRU DQG'HFUHHRI)HEUXDU\JRYHUQLQJFRQ HOHFWURQLFQRWLƄFDWLRQSURFHGXUHVWRFRPSOHWHO\HOLPL GLWLRQVIRUVHWWLQJXSDQGRSHUDWLQJGLJLWDOFHUWLƄFDWLRQ nate the need for the concerned party to be physically HQWLWLHVDQGPRGHUQL]LQJWKHLUDFFUHGLWDWLRQPHWKRGRO SUHVHQWWKHXVHRIDZHEVLWHWRVWUHDPOLQHIRUPDOLWLHV RJ\7KLVGHFUHHUHSODFHV'HFUHHRI DQG UHTXHVWV IRU VHUYLFHV DQG WKH XVH RI HOHFWURQLF ƄOHV DQG YLUWXDO PHHWLQJV 5HJXODWLRQV JRYHUQLQJ $FWSURYLGHVWKDWQRDGPLQLVWUDWLYHRUMXGLFLDODF HOHFWURQLFƄOHVKDYHDOUHDG\EHHQLVVXHGE\WKH*RY WLRQ VKDOO GHQ\ WKH HIIHFWLYHQHVV YDOLGLW\ RU ELQGLQJ HUQPHQWLQ'HFUHHRI'HFHPEHU nature and evidential value of information provided in WKHIRUPRIGDWDPHVVDJHVEDVHGVROHO\RQWKHIRUP ,QDGGLWLRQ$FWRI-XO\JRYHUQLQJQRWDULDO RIVXFKPHVVDJHVRURQWKHIDFWWKDWWKH\DUHQRWSUH activities, authorizes notarial services and consulates VHQWHG LQ WKHLU RULJLQDO IRUP 7KH HYLGHQWLDO YDOXH RI WKDWKDYHDSSOLHGWRWKH2IƄFHRIWKH6XSHULQWHQGHQW GDWDPHVVDJHVLVGHWHUPLQHGLQDFFRUGDQFHZLWKWKH RI ,QGXVWU\ DQG &RPPHUFH WR DFW DV FHUWLƄFDWLRQ UHOHYDQWSURYLVLRQVRIWKH&RGHRI&LYLO3URFHGXUH&R HQWLWLHVXQGHU$FWRI7KH\DUHDOORZHGWR ORPELDKDVVLJQHGWKH8QLWHG1DWLRQV&RQYHQWLRQRQ WUDQVPLWWRRWKHUQRWDULDOVHUYLFHVRUFRQVXODWHVtLQ WKH8VHRI(OHFWURQLF&RPPXQLFDWLRQVLQ,QWHUQDWLRQDO WKHIRUPRIGDWDPHVVDJHVWKURXJKHOHFWURQLFRSWLFDO &RQWUDFWV  DOWKRXJKLWKDVQRW\HWUDWLƄHGLW RUVLPLODUPHDQVtFRSLHVFHUWLƄFDWHVDQGUHFRUGVRI 3XUVXDQW WR 'HFUHH /DZ  RI  -DQXDU\  GRFXPHQWVWDNHQIURPWKHLUƄOHV8QGHUWKH$FWWKH WKH2IƄFHRIWKH6XSHULQWHQGHQWRI,QGXVWU\DQG&RP UHVXOWLQJGRFXPHQWVDUHFRQVLGHUHGDXWKHQWLF II. REPORT ON LEGISLATION IN THE LATIN AMERICAN COUNTRIES 23

'HFUHHRI0DUFKLVVXLQJWKH7D[6WDW data contained in databases, whether administered XWH UHJXODWHV WKH XVH RI HOHFWURQLF LQYRLFHV DQG E\SXEOLFRUSULYDWHHQWLWLHVZLWKRXWSUHMXGLFHWRWKH GRFXPHQWVHTXLYDOHQWWRVDOHVLQYRLFHV'HFUHH VSHFLDOUHJXODWLRQVWKDWDSSO\WRWKHP,QWHOOLJHQFHGD RI  0D\  UHJXODWLQJ DUWLFOH  RI WKH 7D[ WDEDVHVSURGXFHGE\WKH6WDWH,QWHOOLJHQFH6HUYLFHWR 6WDWXWH GHƄQHV WKH FRQFHSW RI HOHFWURQLF LQYRLFLQJ VDIHJXDUGWKHIRUHLJQDQGGRPHVWLFQDWLRQDOVHFXULW\ and sets rules on various aspects of the issuance of interests of Colombia, as well as data maintained for electronic sales invoices, as well as on their validity, personal or domestic use and data that are only circu DXWKRUL]LQJ SHUVRQV UHTXLUHG WR SHUIRUP WKLV GXW\ WR ODWHGLQWHUQDOO\LHWKDWDUHQRWSURYLGHGWRRWKHUOHJDO GRVRWKURXJKHOHFWURQLFPHDQV HQWLWLHVRULQGLYLGXDOV ,Q WKH DUHD RI FXVWRPV RSHUDWLRQV 'HFUHH  RI 7KHSULQFLSDOULJKWVUHFRJQL]HGE\WKLVOHJLVODWLRQLQ  'HFHPEHU  FUHDWHV WKH 6LQJOH :LQGRZ IRU FOXGHWKHqULJKWRIH[SXQJHPHQWrXQGHUVWRRGDVWKH )RUHLJQ7UDGHZKLFKLVDGPLQLVWHUHGE\WKH0LQLVWU\ ULJKWRISHUVRQVRQZKRPWKHUHLVGDWDUHODWLQJWRSD\ RI&RPPHUFH,QGXVWU\DQG7RXULVPXVLQJHOHFWURQLF PHQW GHOLQTXHQFLHV FROOHFWLRQV SRUWIROLR VWDWXV DV PHDQVWKURXJKZKLFKWKHDGPLQLVWUDWLYHHQWLWLHVFRQ ZHOODVGDWDUHODWLQJJHQHUDOO\WRIDLOXUHWRPHHWREOL FHUQHGZLWKIRUHLJQWUDGHRSHUDWLRQVVKDUHLQIRUPDWLRQ JDWLRQVWRKDYHVXFKGDWDH[SXQJHGIRXU\HDUVIURP IRUWKHSXUSRVHRIJUDQWLQJDXWKRUL]DWLRQVDQGSHUPLWV the date on which the overdue amounts are paid or UHODWHGWRWKHLPSRUWDWLRQDQGH[SRUWDWLRQRIJRRGV IURPWKHGDWHRQZKLFKWKHRYHUGXHREOLJDWLRQLVPHW 7KH6LQJOH:LQGRZIRU)RUHLJQ7UDGHSURYLGHVIRUGLJL 2QFHWKLVWHUPKDVHODSVHGWKHLQIRUPDWLRQPXVWEH WDOVLJQDWXUHVDQGHOHFWURQLFSD\PHQWVEDVHGRQ;0/ removed from the databases of the entities maintain GRFXPHQWVZKLFKDUHXVHGWRGLJLWL]HGRFXPHQWVDQG LQJVXFKLQIRUPDWLRQWKXVHQVXULQJWKDWXVHUVZLOOQRW administrative procedures connected with advance have access to such information maintained by credit LPSRUWDQGH[SRUWDXWKRUL]DWLRQV DJHQFLHV7KHOHJLVODWLRQFRQWDLQVDVSHFLDOWLWOHUHJX ODWLQJFRPSODLQWVDQGUHTXHVWVWRDFFHVVGDWD E  &RQVXPHUSURWHFWLRQ 'HFUHHRI-XQHSDUWLDOO\UHJXODWHV$FW 7KH 3ROLWLFDO &RQVWLWXWLRQ RI &RORPELD SURWHFWV FRQ 1RDQGHVWDEOLVKHVDQXPEHURISURYLVLRQVVWLS VXPHUVIURPEHLQJVROGJRRGVDQGVHUYLFHVWKDWSRVH XODWLQJWKDWWKHSHUVRQUHIHUUHGWRLQWKHLQIRUPDWLRQ D WKUHDW WR WKHLU KHDOWK RU VDIHW\ ,W DOVR UHFRJQL]HV must authorize the use of his or her personal data, as FRQVXPHUVpULJKWWRHIƄFLHQWSXEOLFVHUYLFHV,QWHUPV ZHOODVSROLFLHVRQWKHKDQGOLQJRIGDWDE\WKHSHUVRQV RI SURWHFWLRQ IRU RQOLQH FXVWRPHUV $FW  RI  LQFKDUJHRIVXFKPDWWHUVDQGRQKRZWKHGDWDVXE 2FWREHUDQHZVWDWXWHGHVLJQHGWRSURWHFWFRQ MHFWVFDQH[HUFLVHWKHLUULJKWV VXPHUVLQFOXGHVDFRPSOHWHFKDSWHURQHFRPPHUFH OD\LQJ GRZQ D IXOO VHW RI UHJXODWLRQV RQ EXVLQHVV G  ,QGXVWULDODQGLQWHOOHFWXDOSURSHUW\ FRQVXPHUUHODWLRQVDQGVWUHVVLQJWKHGXW\WRSURYLGH ,QWKHDUHDRILQWHOOHFWXDOSURSHUW\ULJKWVWKH$QGHDQ information and act with loyalty and prudence in of &RPPXQLW\pV VXSUDQDWLRQDO UHJXODWRU\ IUDPHZRUN LV IHULQJJRRGVWKURXJKHOHFWURQLFPHDQV7KH2IƄFHRI GHVHUYLQJRIQRWHLQSDUWLFXODU'HFLVLRQRI WKH6XSHULQWHQGHQWRI,QGXVWU\DQG&RPPHUFHLVWKH RQ WKH &RPPRQ &RS\ULJKW DQG 5HODWHG 5LJKWV 5H RYHUVLJKWDJHQF\IRUVXFKVHUYLFHV JLPH ZKLFK SURWHFWV WKH ULJKW RI DXWKRUV DQG RWKHU F  3URWHFWLRQRISHUVRQDOGDWD ULJKWV KROGHUV WR OLWHUDU\DUWLVWLF DQG VFLHQWLƄ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t SDUWLFXODUO\ ƄQDQFLDO -DQXDU\  DGGUHVVHV FRS\ULJKW 'HFUHH  RI FUHGLW FRPPHUFLDO DQG VHUYLFHVUHODWHG LQIRUPDWLRQ  -DQXDU\  SURYLGHV IRU UHJXODWLRQ XQGHU $Q t DV ZHOO DV LQIRUPDWLRQ IURP RWKHU FRXQWULHV 7KH GHDQ'HFLVLRQDQG$FWRI)HEUXDU\ SXUSRVHRIWKHVHDFWVLVWRJXDUDQWHHWKHULJKWRIDOO UHODWHV WR FROOHFWLYH PDQDJHPHQW ERGLHV RYHUVHHLQJ persons to have access to, update and correct infor FRS\ULJKWDQGUHODWHGULJKWV PDWLRQFRQFHUQLQJWKHPLQGDWDEDQNVDORQJZLWKWKH RWKHUFRQVWLWXWLRQDOJXDUDQWHHVULJKWVDQGIUHHGRPV ,QDGGLWLRQ&RORPELDKDVVLJQHGWKHIROORZLQJLQVWUX UHODWLQJWRWKHFROOHFWLRQSURFHVVLQJDQGFLUFXODWLRQRI PHQWV SHUVRQDOGDWD7KLVOHJLVODWLRQDSSOLHVWRDOOSHUVRQDO • %HLMLQJ7UHDW\RQ$XGLRYLVXDO3HUIRUPDQFHV  24 Study on the harmonization of cyberlegislation in Latin America

• :,32 &RS\ULJKW 7UHDW\ DQG :,32 3HUIRUPDQFHV Colombia has implemented a number of public poli DQG3KRQRJUDPV7UHDW\ FLHVDLPHGDWSURPRWLQJFRQQHFWLYLW\IRULWVFLWL]HQV • %HUQH &RQYHQWLRQ IRU WKH 3URWHFWLRQ RI /LWHUDU\ however, the fact that entrepreneurs still have not DQG$UWLVWLF:RUNV DSSURSULDWHGWHFKQRORJ\LQWKHLUSURGXFWLRQFKDLQVUH PDLQVDFKDOOHQJH7KHUHLVDOVRDQHHGIRULPSURYHG • &RQYHQWLRQ IRU WKH 3URWHFWLRQ RI 3URGXFHUV RI LQWHUQDOKDUPRQL]DWLRQRI,&7UHODWHGVWDQGDUGVJLYHQ 3KRQRJUDPV$JDLQVW8QDXWKRUL]HG'XSOLFDWLRQRI the proliferation of provisions applicable to businesses 7KHLU3KRQRJUDPV *HQHYD&RQYHQWLRQ WKDWKDYHQRW\HWEHHQXQGHUVWRRGRUDSSOLHG • ,QWHUQDWLRQDO&RQYHQWLRQIRUWKH3URWHFWLRQRI3HU COSTA RICA IRUPHUV 3URGXFHUV RI 3KRQRJUDPV DQG %URDG FDVWLQJ2UJDQL]DWLRQV 5RPH&RQYHQWLRQ &RVWD5LFDQOHJLVODWLRQRQHFRPPHUFHLQFOXGHVWKH • %UXVVHOV&RQYHQWLRQUHODWLQJWRWKH'LVWULEXWLRQRI &HUWLƄFDWHV 'LJLWDO 6LJQDWXUHV DQG (OHFWURQLF 'RFX 3URJUDPPH&DUU\LQJ6LJQDOV7UDQVPLWWHGE\6DW PHQWV$FW $FW1R RI2FWREHUWKH ellite &LYLO &RGH $FW 1R   WKH &RPPHUFLDO &RGH $FW 1R RI$SULODQGWKH$FWRQ3URPRWLRQ • $JUHHPHQWRQ7UDGH5HODWHG$VSHFWVRI,QWHOOHF RI &RPSHWLWLRQ DQG (IIHFWLYH &RQVXPHU 3URWHFWLRQ WXDO3URSHUW\5LJKWV 75,36 DGPLQLVWHUHGE\:72 $FW1R RI'HFHPEHU7KHIROORZLQJ H  'RPDLQQDPHV SDUDJUDSKV FRQWDLQ D UHYLHZ RI WKHVH DQG RWKHU LP SRUWDQWODZV 8QGHU $FW  RI  WKH FRXQWU\pVFR GRPDLQ QDPHLVDGPLQLVWHUHGE\WKH8QLYHUVLW\RIWKH$QGHV D  (OHFWURQLFWUDQVDFWLRQVHOHFWURQLFVLJQDWXUHV E\GHOHJDWLRQRI,$1$,WLVJRYHUQHGRQDqƄUVWFRPH ƄUVWVHUYHGrEDVLVDVHVWDEOLVKHGWKHUHJXODWLRQVIRU ,Q WKH DUHD RI HOHFWURQLF WUDQVDFWLRQV WKH &RPPHU WKHXVHRIFRGRPDLQQDPHV3XUVXDQWWRLWVDXWKRULW\ FLDO&RGH $FW1R ZKLFKJRYHUQVFRPPHUFLDO XQGHU$FWWKH0LQLVWU\RI,QIRUPDWLRQDQG&RP WUDQVDFWLRQVDQGWKH&LYLO&RGH $FW1R ZKLFK PXQLFDWLRQV7HFKQRORJ\DGRSWHGWKH,&$118QLIRUP deals with the formation of contracts between pre 'RPDLQ1DPH'LVSXWH5HVROXWLRQ3ROLF\ sent parties and absent parties, the time and place DWZKLFKDFRQWUDFWLVH[HFXWHGDQGWKHIRUPDOLWLHVUH I  &\EHUFULPHDQGLQIRUPDWLRQVHFXULW\ TXLUHG DUH VXSSOHPHQWHG E\ WKH 'LJLWDO &HUWLƄFDWHV 'LJLWDO6LJQDWXUHVDQG(OHFWURQLF'RFXPHQWV$FW $FW $VUHJDUGVFULPLQDOODZ$FWRI-DQXDU\ 1R   ZKLFK UHFRJQL]HV WKH XVH DQG YDOLGLW\ RI DPHQGLQJWKH&ULPLQDO&RGHRI&RORPELDGHƄQHVDV HOHFWURQLFPHDQVIRUH[HFXWLQJFRQWUDFWV SURWHFWHGOHJDODVVHWVWKHLQIRUPDWLRQDQGGDWDSUH VHUYHGHQWLUHO\LQV\VWHPVWKDWXWLOL]H,&7V $FW1RLQFRUSRUDWHVFHUWDLQSULQFLSOHVIURPWKH 81&,75$/0RGHO/DZRQ(OHFWURQLF6LJQDWXUHVDQG 7KH$FWDGGVDVHFWLRQRQWKHSURWHFWLRQRILQIRUPDWLRQ HVWDEOLVKHVDJHQHUDOOHJDOIUDPHZRUNIRUWKHWUDQVSDU DQGGDWDDQGGHƄQHVYDULRXVFULPHVVXFKDVLOOHJDO ent, reliable and secure use of electronic documents DFFHVV WR FRPSXWHU V\VWHPV LOOHJDOO\ LPSHGLQJ WKH DQGHOHFWURQLFVLJQDWXUHVE\SXEOLFDQGSULYDWHHQWL IXQFWLRQLQJRIVXFKDV\VWHPRURIDWHOHFRPPXQLFD WLHVLH L LWDSSOLHVWRDOOW\SHVRIWUDQVDFWLRQVDQG WLRQVQHWZRUNLQWHUFHSWLQJFRPSXWHUGDWDGDPDJLQJ OHJDODFWVZKHWKHUSXEOLFRUSULYDWHLQWKHDEVHQFH FRPSXWHUV\VWHPVXVLQJPDOLFLRXVVRIWZDUHYLRODWLQJ RIOHJDOSURYLVLRQVWRWKHFRQWUDU\SURYLGHGWKDWWKH SHUVRQDOGDWDDQGDFFHVVLQJZHEVLWHVWRREWDLQSHU VSHFLƄFQDWXUHRUUHTXLUHPHQWVRIWKHDFWRUEXVLQHVV VRQDOGDWD6XFKEHKDYLRXUVDUHFRQVLGHUHGWRYLRODWH LQYROYHG DUH QRW LQFRPSDWLEOH ZLWK VXFK DSSOLFDWLRQ FRQƄGHQWLDOLW\DQGLQWHUIHUHZLWKWKHLQWHJULW\DQGDYDLO LL LWH[SOLFLWO\DXWKRUL]HVWKH6WDWHDQGDOOSXEOLFHQ DELOLW\RIGDWDDQGLQIRUPDWLRQ7KH$FWDOVRSURYLGHV WLWLHVWRXVHGLJLWDOFHUWLƄFDWHVGLJLWDOVLJQDWXUHVDQG VDQFWLRQVIRUWKHIWXVLQJLQIRUPDWLRQWHFKQRORJ\PHGLD HOHFWURQLFGRFXPHQWVLQWKHLUDUHDVRIDXWKRULW\ LLL LW DQGIRUXQDXWKRUL]HGWUDQVIHURIDVVHWVWKURXJKVXFK UHFRJQL]HVWKHLVVXDQFHRIFHUWLƄFDWHVDIƄGDYLWVDQG PHGLD RWKHUGRFXPHQWV LY WKHVXEPLVVLRQSURFHVVLQJDQG J  3HQGLQJOHJLVODWLRQDQGFKDOOHQJHV UHJLVWUDWLRQRIGRFXPHQWVLQWKH1DWLRQDO5HJLVWHUDQG Y  WKH SURFHVVLQJ SUHVHUYDWLRQ DQG XVH RI QRWDULDO $WSUHVHQWWZRSURSRVDOVIRUUHJXODWLRQVDUHZRUWK\RI SURWRFROV PHQWLRQQDPHO\DGUDIWGHFUHHPDQGDWLQJWKHPDVV XVH RI HOHFWURQLF LQYRLFLQJ DQG GUDIW UHJXODWLRQV RQ ([HFXWLYH 'HFUHH 1R 0,&,7 RI  0DUFK WUDQVIHUDEOHHOHFWURQLFGRFXPHQWVZKLFKZRXOGJRY UHJXODWHVWKH'LJLWDO&HUWLƄFDWHV'LJLWDO6LJQD HUQHOHFWURQLFVHFXULWLHV WXUHV DQG (OHFWURQLF 'RFXPHQWV $FW ZKLFK DPRQJ II. REPORT ON LEGISLATION IN THE LATIN AMERICAN COUNTRIES 25

RWKHUWKLQJVGHƄQHVWKHGXWLHVDQGKLHUDUFK\RIGLI LVWUDWLYH DQG MXGLFLDO SURWHFWLRQ DJDLQVW PLVOHDGLQJ IHUHQW FHUWLI\LQJ DXWKRULWLHV EHJLQQLQJ ZLWK WKH URRW DGYHUWLVLQJDQGDEXVLYHSUDFWLFHVDQGFODXVHVDVZHOO FHUWLƄFDWLRQ DXWKRULW\ DQG WKH FKDUDFWHULVWLFV DQG DV DJDLQVW XQIDLU FRPPHUFLDO PHWKRGV RU PHWKRGV IXQFWLRQVRIWKHSXEOLFNH\LQIUDVWUXFWXUH,WDOVROD\V WKDWOLPLWIUHHGRPRIFKRLFH GRZQ WKH WHFKQLFDO DQG DGPLQLVWUDWLYH TXDOLƄFDWLRQV WKDWPXVWEHPHWE\UHJLVWHUHGFHUWLI\LQJDXWKRULWLHV 7KHUHJXODWLRQVWRWKH3URPRWLRQRI&RPSHWLWLRQDQG (IIHFWLYH&RQVXPHU3URWHFWLRQ$FWLVVXHGE\([HFX $VUHJDUGVSXEOLFFRQWUDFWLQJWKH$GPLQLVWUDWLYH3UR WLYH'HFUHH1R0(,&RI6HSWHPEHU FXUHPHQW$FW $FW RI-XQHLQFRUSRUDWHV H[SDQGRQWKHFRQFHSWRIqPHDQVRIGLVVHPLQDWLRQrWR the use of electronic communications in public con LQFOXGHWKHXVHRIHPDLODQGRWKHUPHDQVRIHOHFWURQLF WUDFWLQJSURFHGXUHVSURYLGHGWKHGHOLYHU\DQGFRQWHQW or online communication and telecommunications for RIPHVVDJHVFDQEHJXDUDQWHHG7KHUHJXODWLRQVIRU DGYHUWLVLQJSXUSRVHV7KHUHJXODWLRQVDOVRFRYHUWKH XVH RI WKH &RPSUD5(' *RYHUQPHQW 3URFXUHPHQW ULJKWRIFRQVXPHUVWRRSWRXWZKLFKPD\EHH[HUFLVHG 6\VWHP VHW IRUWK LQ ([HFXWLYH 'HFUHH 1R  YLDHPDLOZLWKLQHLJKWGD\VDIWHUWKHGDWHRISXUFKDVH RI2FWREHUDQGWKHUHJXODWLRQVIRUWKHXVH RIWKH0HU/LQN2QOLQH0DUNHW(OHFWURQLF6\VWHPIRU F  3URWHFWLRQRISHUVRQDOGDWD *RYHUQPHQW 3URFXUHPHQW LQ ([HFXWLYH 'HFUHH 1R :LWKUHJDUGWRSULYDF\DQGSURWHFWLRQRIGDWD&RVWD 033/$1RI2FWREHUPDNHLWSRVVL 5LFDKDVDGRSWHGWKH8QLYHUVDO'HFODUDWLRQRI+XPDQ EOHWRHOHFWURQLFDOO\SXEOLVKUHTXHVWVIRUJRRGVZRUNV 5LJKWVDQGWKH,QWHU$PHULFDQ&RQYHQWLRQRQ+XPDQ DQGVHUYLFHVWRHOHFWURQLFDOO\SURYLGHLQIRUPDWLRQRQ 5LJKWV WKH6DQ-RVÆ3DFW ZKLFKUHFRJQL]HDVIXQGD SURYLGHUVDQGWKHSURFXUHPHQWSURFHVVIURPEHJLQ PHQWDOULJKWVWKHULJKWWRFRQƄGHQWLDOLW\DQGWRDSULYDWH QLQJ WR HQG LQFOXGLQJ GHFLVLRQV RQ DQG UHVXOWV RI OLIHWKHVHULJKWVDUHDOVRUHƅHFWHGLQWKH&RQVWLWXWLRQ SXUFKDVHVWKXVDOORZLQJSRWHQWLDOSURYLGHUVFLWL]HQV DQGWKH*RYHUQPHQWLWVHOIWRREWDLQUHOHYDQWLQIRUPD ,QWHUPVRIGRPHVWLFOHJLVODWLRQWKH$FWRQ3URWHFWLRQ WLRQRQOLQH RI3HUVRQVDQG3URFHVVLQJRIWKHLU3HUVRQDO'DWD $FW 1R RI6HSWHPEHUHVWDEOLVKHVWKHOH 7KH,QWHJUDWHG3XEOLF3URFXUHPHQW6\VWHPZDVFUH JDOIUDPHZRUNIRUWKHSURFHVVLQJRISHUVRQDOGDWDE\ DWHG E\ ([HFXWLYH 'HFUHH 1R 0,&,77RI  LQGLYLGXDOVDQGSXEOLFDQGSULYDWHLQVWLWXWLRQV7KH$FW -DQXDU\DVWKHWHFKQRORJLFDOSODWIRUPWKDWPXVW FRPSOLHVZLWKWKH'LUHFWLYHVIRU+DUPRQL]DWLRQRI'DWD be used by the central administration in all admin 3URWHFWLRQ LQ WKH ,EHUR$PHULFDQ &RPPXQLW\ LVVXHG LVWUDWLYH FRQWUDFWLQJ SURFHGXUHV &RPSUD5(' DQG E\WKH,EHUR$PHULFDQ'DWD3URWHFWLRQ1HWZRUN7KH 0HU/LQNPD\EHXVHGE\GHFHQWUDOL]HGLQVWLWXWLRQVRQ $FWSURWHFWVWKHULJKWRIGDWDVXEMHFWVWRGHFLGHZKDW DYROXQWDU\EDVLV information on their life or private activities may be the ,Q WKH DUHD RI SXEOLF DGPLQLVWUDWLRQ 'LUHFWLYH 1R VXEMHFWRIDXWRPDWHGRUPDQXDOGDWDSURFHVVLQJ 0,&,77+0(,& RQ PDVVLƄFDWLRQ RI WKH LPSOH 7KH $FW DOVR VWLSXODWHV WKDW DOO GDWDEDVHV SXEOLF RU PHQWDWLRQDQGXVHRIGLJLWDOVLJQDWXUHVLQWKH&RVWD private, that are administered for the purpose of dis 5LFDQSXEOLFVHFWRURI$SULOLQVWUXFWVSXEOLF WULEXWLRQ GLVVHPLQDWLRQ RU VDOH PXVW EH UHJLVWHUHG DJHQFLHVWRLPSOHPHQWWHFKQLFDODQGƄQDQFLDOPHDV LQ WKH UHJLVWU\ WR EH VHW XS IRU WKDW SXUSRVH E\ WKH ures to enable citizens to use electronic means to 3HUVRQDO'DWD3URWHFWLRQ$JHQF\VXEMHFWWRSD\PHQW REWDLQ LQIRUPDWLRQ PDNH TXHULHV VXEPLW UHTXHVWV RI D \HDUO\ IHH RI 86  IRU GDWDEDVH UHJXODWLRQ H[SUHVV WKHLU FRQVHQW DQG FRPPLWPHQW PDNH DQGPDQDJHPHQW,WDOVRSURYLGHVWKDWLQWKHFDVHRI payments, carry out transactions and oppose admin RYHUDOOFRQWUDFWVIRUORZPHGLXPDQGKLJKQXPEHUV LVWUDWLYHGHFLVLRQVDQGDFWV RI TXHULHV WR WKH UHJLVWHUHG GDWDEDVH RU IRU RQOLQH E  &RQVXPHUSURWHFWLRQ VHUYLFHFRQWUDFWVE\QXPEHURIDSSOLFDWLRQVWKHUHJX lations shall determine the applicable fee which may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p REOLJDWLRQV WR FRQVXPHUV LQ that the parties responsible must implement to pro UHJDUG WR LQIRUPDWLRQ DGYHUWLVLQJ RU SXEOLF RIIHULQJ WHFWSHUVRQDOGDWD LL UHJLVWUDWLRQRIGDWDEDVHVZLWK RIJRRGVRUVHUYLFHV,QDGGLWLRQLWSURYLGHVDGPLQ WKH3HUVRQDO'DWD3URWHFWLRQ$JHQF\ LLL WKHDPRXQWV 26 Study on the harmonization of cyberlegislation in Latin America

RIIHHVWREHSDLGEDVHGRQWKHOHYHORITXHULHVWRWKH ,W KDV DOVR VLJQHG WKH $JUHHPHQW RQ 7UDGH5HODWHG GDWDEDVHDQG LY LVVXHVUHODWLQJWRHYLGHQFH $VSHFWV RI ,QWHOOHFWXDO 3URSHUW\ 5LJKWV 75,36  DG PLQLVWHUHGE\:72 G  ,QGXVWULDODQGLQWHOOHFWXDOSURSHUW\ H  'RPDLQQDPHV 2Q WKH PDWWHU RI LQWHOOHFWXDO SURSHUW\WKH &RS\ULJKW DQG5HODWHG5LJKWV$FW $FW1R RI2FWR 7KH 1DWLRQDO $FDGHP\ RI 6FLHQFH WKURXJK LWV VXE EHU  DV DPHQGHG E\ $FW 1R  RI  0D\ VLGLDU\ 1,&,QWHUQHW &RVWD 5LFD KWWSQLFFU  LV SURWHFWVDUWLVWLFDQGOLWHUDU\ZRUNVDVZHOODV UHVSRQVLEOH IRU DGPLQLVWHULQJ DQG FRRUGLQDWLQJ WKH FRPSXWHUSURJUDPVDQGGDWDEDVHVDQGFRPSLODWLRQV RSHUDWLRQRIWKHWRSOHYHOGRPDLQFU,WVGRPDLQUH 'HFUHH1R&20(;-3LVVXLQJUHJXODWLRQVRQ moval policy establishes that in the case of a dispute OLPLWDWLRQVRQOLDELOLW\RIVHUYLFHSURYLGHUVIRULQIULQJH RYHUDFUGRPDLQQDPH1,&,QWHUQHW&RVWD5LFDZLOO PHQW RI FRS\ULJKW DQG UHODWHG ULJKWV SXUVXDQW WR remove the domain name when ordered to do so by &$)7$'5DUWLFOHRI-XQHHVWDE DGRPHVWLFRUIRUHLJQFRXUW7KHSURFHGXUHGRHVQRW lishes those cases in which the liability of providers of DSSO\ WKH ,&$11 8QLIRUP 'RPDLQ1DPH 'LVSXWH FDFKLQJKRVWLQJFRQQHFWLRQDQGOLQNLQJVHUYLFHVVKDOO 5HVROXWLRQ3ROLF\ be limited in respect of the materials cached or trans I  &\EHUFULPHDQGLQIRUPDWLRQVHFXULW\ PLWWHGWKURXJKWKHLUV\VWHPVRUQHWZRUNV 7KH&\EHUFULPH$FW $FW1R DQGRWKHUDPHQG $VUHJDUGVLQGXVWULDOSURSHUW\LWVKRXOGEHQRWHGWKDW PHQWVWRWKH&ULPLQDO&RGHRI1RYHPEHUD WKH3DWHQWV'UDZLQJVDQG,QGXVWULDO0RGHOV$FW $FW QXPEHURIFRPSXWHUUHODWHGRIIHQFHVZHUHDGGHGWR 1R RI$SULODVPRVWUHFHQWO\DPHQGHG SXQLVK L DQ\RQHZKRWDNHVFRQWURORIJDLQVDFFHVV E\$FW1RRI0DUFKGRHVQRWFRYHU WRPRGLƄHVDOWHUVGHOHWHVLQWHUFHSWVLQWHUIHUHVZLWK PDWKHPDWLFDOPHWKRGVRUFRPSXWHUSURJUDPVLQLVR XVHV GLVVHPLQDWHV RU GHƅHFWV IURP WKHLU LQWHQGHG ODWLRQDVLQYHQWLRQVHOLJLEOHIRUSDWHQWSURWHFWLRQ7KH UHFLSLHQW PHVVDJHV GDWD RU LPDJHV LQ HOHFWURQLF 8QGLVFORVHG,QIRUPDWLRQ$FW $FW1R RI-DQ FRPSXWHUEDVHGPDJQHWLFRUWHOHPDWLFIRUPIRUWKH XDU\LVDOVRUHOHYDQW SXUSRVHRIGLVFRYHULQJWKHVHFUHWVRUYLRODWLQJWKHSUL 2Q WKH LQWHUQDWLRQDO LQWHOOHFWXDO SURSHUW\ ULJKWV IURQW YDF\RIDQRWKHUZLWKRXWWKHODWWHUpVFRQVHQW LL DQ\RQH &RVWD5LFDKDVUDWLƄHGWKHIROORZLQJLQVWUXPHQWV ZKRLQƅXHQFHVGDWDSURFHVVLQJRUUHVXOWVLQDFRP SXWHU V\VWHP WKURXJK SURJUDPPLQJ XVH RI IDOVH RU • :,32 &RS\ULJKW 7UHDW\ DQG :,32 3HUIRUPDQFHV incomplete data, improper use of data or any other DQG3KRQRJUDPV7UHDW\ DFWLRQWKDWDIIHFWVWKHV\VWHPpVGDWDSURFHVVLQJZLWK • %HLMLQJ7UHDW\RQ$XGLRYLVXDO3HUIRUPDQFHV  WKHLQWHQWLRQRIREWDLQLQJPDWHULDOEHQHƄWIRUKLPKHU • 3URWRFRO WR WKH &HQWUDO $PHULFDQ $JUHHPHQW IRU VHOI RU IRU D WKLUG SDUW\ DQG LLL  DQ\RQH ZKR E\ DQ\ WKH3URWHFWLRQRI,QGXVWULDO3URSHUW\ unauthorized means accesses, erases, deletes, modi ƄHVRUUHQGHUVXQXVDEOHGDWDUHFRUGHGLQDFRPSXWHU • 'RPLQLFDQ 5HSXEOLF&HQWUDO $PHULFD8QLWHG 6WDWHV)UHH7UDGH$JUHHPHQW &$)7$'5 7KH *HQHUDO &XVWRPV $FW $FW 1R   RI  • /LVERQ $JUHHPHQW IRU WKH 3URWHFWLRQ RI $SSHOOD 2FWREHU  GHƄQHV FHUWDLQ ,7UHODWHG RIIHQFHV WLRQVRI2ULJLQDQGWKHLU,QWHUQDWLRQDO5HJLVWUDWLRQ committed to the detriment of the systems used by WKH1DWLRQDO&XVWRPV6HUYLFH • 3DULV &RQYHQWLRQ IRU WKH 3URWHFWLRQ RI ,QGXVWULDO 3URSHUW\  J  3HQGLQJOHJLVODWLRQDQGFKDOOHQJHV • %HUQH &RQYHQWLRQ IRU WKH 3URWHFWLRQ RI /LWHUDU\ $PRQJWKHELOOVGHVHUYLQJVSHFLDODWWHQWLRQDUHWKRVH DQG$UWLVWLF:RUNV UHIHUULQJWRFULPLQDOSURFHGXUHWRIDFLOLWDWHWKHFROOHF • &RQYHQWLRQ IRU WKH 3URWHFWLRQ RI 3URGXFHUV RI WLRQDQGSURFHVVLQJRIHYLGHQFHLQHOHFWURQLFPHGLD 3KRQRJUDPV$JDLQVW8QDXWKRUL]HG'XSOLFDWLRQRI 2Q WKH LQWHUQDWLRQDO VFHQH &RVWD 5LFD KDV QRW \HW 7KHLU3KRQRJUDPV *HQHYD&RQYHQWLRQ UDWLƄHGWKH8QLWHG1DWLRQV&RQYHQWLRQRQWKH8VHRI (OHFWURQLF&RPPXQLFDWLRQVLQ,QWHUQDWLRQDO&RQWUDFWV ,QWHUQDWLRQDO&RQYHQWLRQIRUWKH3URWHFWLRQRI3HU • RUWKH&RXQFLORI(XURSHpV&RQYHQWLRQRQ&\EHUFULPH IRUPHUV 3URGXFHUV RI 3KRQRJUDPV DQG %URDG FDVWLQJ2UJDQL]DWLRQV 5RPH&RQYHQWLRQ CUBA • %UXVVHOV&RQYHQWLRQ5HODWLQJWRWKH'LVWULEXWLRQRI 3URJUDPPH&DUU\LQJ6LJQDOV7UDQVPLWWHGE\6DW 7KHGHYHORSPHQWRIHFRPPHUFHLQ&XEDtWKURXJK ellite WKHGHSOR\PHQWRIWHFKQRORJLFDOLQIUDVWUXFWXUHDQGD II. REPORT ON LEGISLATION IN THE LATIN AMERICAN COUNTRIES 27

UHJXODWRU\V\VWHPWRVXSSRUWLWtUHSUHVHQWVDQLPSRU • 3DULV &RQYHQWLRQ IRU WKH 3URWHFWLRQ RI ,QGXVWULDO WDQWRSSRUWXQLW\IRUH[SORLWLQJWKHHFRQRPLFEHQHƄWV 3URSHUW\ RI,&7 • %HUQH &RQYHQWLRQ IRU WKH 3URWHFWLRQ RI /LWHUDU\ DQG$UWLVWLF:RUNV D  (OHFWURQLFWUDQVDFWLRQVHOHFWURQLFVLJQDWXUHV •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on servers in Cuba, independently of whether they are DOVR KRVWHG RQ IRUHLJQ VHUYHUV 'HFLVLRQ  E  &RQVXPHUSURWHFWLRQ RQ UHVSRQVLELOLW\ RI &XED1,& DQG JHQHULF GRPDLQV &XED GRHV QRW KDYH OHJLVODWLRQ RQ FRQVXPHU SUR SURYLGHVWKDWWKH&XED1,&1HWZRUN,QIRUPDWLRQ&HQ WHFWLRQDOWKRXJKUHODWHGLVVXHVDUHGHDOWZLWKLQWKH tre is responsible for the proper administration and FRQWH[W RI WKH &RQVXPHU 3URWHFWLRQ 6\VWHP ZKLFK PDQDJHPHQWRIWKHFXGRPDLQIRUWKHRSHUDWLRQRI KDVEHHQLQIRUFHVLQFHDQGDSSOLHVWRHQWLWLHV SULPDU\ DQG VHFRQGDU\ GRPDLQQDPH VHUYHUV LQ WKH WKDWHQJDJHLQUHWDLOFRPPHUFH7KHV\VWHPGRHVQRW VHFRQGOHYHO 5HJLVWU\ RI 'RPDLQ 1DPHV XQGHU FX H[SUHVVO\FRYHUHFRPPHUFH7KH&ULPLQDO&RGH $FW DQGIRUWKH5HJLVWU\RI'RPDLQVLQJHQHULFFDWHJRULHV 1R RI'HFHPEHUSURYLGHVIRUSXQLVK XQGHUWKHFXGRPDLQ ment of certain behaviours that are harmful to the %\ LWV 'HFLVLRQ  WKH 0LQLVWU\ RI ,QIRUPDWLRQ LQWHUHVWVRIFRQVXPHUVDVGHVFULEHGEHORZ 7HFKQRORJ\ DQG &RPPXQLFDWLRQV LVVXHG GRPDLQ F  3URWHFWLRQRISHUVRQDOGDWD QDPHUHJXODWLRQVDQGVHWUXOHVIRUDVVLJQLQJDQGUHJ LVWHULQJ GRPDLQ QDPHV RI HQWLWLHV ,W DXWKRUL]HG WKH &XEDQ OHJLVODWLRQ GRHV QRW H[SUHVVO\ UHFRJQL]H WKH 0LQLVWU\pV &RQWURO DQG 6XSHUYLVLRQ $JHQF\ WR WDNH ULJKW WR SURWHFWLRQ RI SHUVRQDO GDWD FRQVHTXHQWO\ VWHSVWRHQVXUHWKDWWKH&XEDQGRPDLQQDPHVV\VWHP WKHUH DUH QR PHFKDQLVPV RU PHDQV IRU SURWHFWLQJ is a distributed, hierarchical and scalable service with VXFKGDWD$QDGPLQLVWUDWLYHUHJXODWLRQLVVXHGE\WKH GHFHQWUDOL]HGFRQWURO,WDOVRHVWDEOLVKHVPHDVXUHVWR 0LQLVWU\RI,QIRUPDWLRQ7HFKQRORJ\DQG&RPPXQLFD EHWDNHQLQFDVHVRIQRQFRPSOLDQFHZLWKUHJXODWLRQV WLRQV LQFOXGHV FHUWDLQ SURWHFWLRQV IRU SHUVRQDO GDWD RQWKHSDUWRIERGLHVDQGDJHQFLHVLQFOXGLQJWHPSR ,Q SDUWLFXODU'HFLVLRQ  RI WKH 0LQLVWU\ RI ,Q UDU\ RU GHƄQLWLYH LQYDOLGDWLRQ RI RSHUDWLQJ OLFHQVHV RU IRUPDWLRQ 7HFKQRORJ\ DQG &RPPXQLFDWLRQV FUHDWHG VXVSHQVLRQRIVHUYLFHV WKH 1DWLRQDO 5HJLVWU\ RI (OHFWURQLF ,QIRUPDWLRQ IRU 'DWD1HWZRUNVDQG'HFLVLRQRIWKHVDPH I  &\EHUFULPHDQGLQIRUPDWLRQVHFXULW\ 0LQLVWU\RI'HFHPEHUHVWDEOLVKHGWKH0HWK 7KH&ULPLQDO&RGH $FW1R GRHVQRWUHIHUWRF\ RGRORJ\IRU$FFHVVE\&XEDQ(QWLWLHVWRWKH,QWHUQHW EHUFULPHEXWLWGRHVGHƄQHDVRIIHQFHVDQXPEHURI DQGWR2WKHU)RUHLJQ'DWD1HWZRUNV behaviours that violate consumer protection rules, in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property, so that the two systems are considered in $V UHJDUGV VHFXULW\ RI LQIRUPDWLRQ 'HFLVLRQ 1R GHSHQGHQWDQGFRPSDWLEOH  RI WKH 0LQLVWU\ RI ,QIRUPDWLRQ 7HFKQRO ,QWKHLQWHUQDWLRQDOFRQWH[W&XEDKDVVLJQHGWKHIRO RJ\ DQG &RPPXQLFDWLRQV RI  -XO\  LVVXHG ORZLQJLQVWUXPHQWV WKH UHJXODWLRQV IRU ,7 VHFXULW\'HFLVLRQ 1R  RI 28 Study on the harmonization of cyberlegislation in Latin America

WKH([HFXWLYH&RPPLWWHHRIWKH&RXQFLORI0LQLVWHUV GLJLWDO VLJQDWXUHV ZLWK UHVSHFW WR KDQGZULWWHQ VLJQD LVVXHGRQ-XO\HVWDEOLVKHGJXLGHOLQHVIRULP WXUHV,WDOVRUHFRJQL]HVWKHLUSUREDWLYHYDOXH SURYLQJ,7VHFXULW\ 7KH$FWDOVRUHJXODWHVFHUWLƄFDWLRQHQWLWLHVUHVSRQVLEOH J  3HQGLQJOHJLVODWLRQDQGFKDOOHQJHV IRULVVXLQJGLJLWDOVLJQDWXUHFHUWLƄFDWHVDQGRIIHULQJRU 7KH UHJXODWRU\ SURSRVDOV FXUUHQWO\ XQGHU UHYLHZ LQ IDFLOLWDWLQJUHJLVWU\VHUYLFHVDQGWLPHVWDPSVLQFRQ FOXGH D GHFUHH ODZ RQ JHQHUDO VWDQGDUGV IRU WKH nection with the transmission and receipt of data SUDFWLFH RI HFRPPHUFH ZKLFK LQFRUSRUDWHV SURYL PHVVDJHV:LWKUHVSHFWWRWKHIRUPDWLRQRIFRQWUDFWV VLRQV UHJXODWLQJ WKH WUDQVPLVVLRQ DQG UHFHSWLRQ RI WKH$FWSURYLGHVWKDWWKHRIIHUDQGLWVDFFHSWDQFHPD\ GDWDPHVVDJHVOHJDOEXVLQHVVFDUULHGRXWHOHFWURQL EHH[SUHVVHGE\PHDQVRIGLJLWDOGRFXPHQWVRUGDWD cally, protection of personal data and activities of PHVVDJHV,WDOVRUHFRJQL]HVGLJLWDOFHUWLƄFDWHVLVVXHG FHUWLƄFDWLRQDQGUHJLVWUDWLRQDXWKRULWLHVDQGRIHQWLWLHV E\IRUHLJQFHUWLƄFDWLRQHQWLWLHV WKDWSHUIRUPFHUWLƄFDWLRQDQGUHJLVWUDWLRQIXQFWLRQV ,QWKHDUHDRIƄQDQFHWKH$FWHPSRZHUVWKH0RQHWDU\ &RQVLGHUDWLRQLVEHLQJJLYHQWRDELOORQWKHSXEOLFNH\ %RDUG WR UHJXODWH DOO PDWWHUV SHUWDLQLQJ WR ƄQDQFLDO LQIUDVWUXFWXUH $ ELOO RQ DPHQGPHQWV WR WKH &ULPLQDO transactions and services associated with electronic Code is also under review which would cover various PHDQVRISD\PHQWFDUULHGRXWE\WKH0RQHWDU\DQG cybercrimes, as well as a proposals on amendments )LQDQFLDO 6\VWHP RI WKH 'RPLQLFDQ 5HSXEOLF 7KH WRWKH&RS\ULJKW$FW $FW1R  0RQHWDU\%RDUGLVVXHGWKHSD\PHQWV\VWHPVUHJXOD 7KH PDLQ FKDOOHQJHV IDFLQJ &XED LQFOXGH WKH GLJLWDO WLRQV ZKLFK HVWDEOLVK D OHJDO UHJLPH DSSO\LQJ WR WKH JDSDQGWKHODFNRIFRQQHFWLYLW\DVZHOODVWKHQHHG FRXQWU\pVSD\PHQWVDQGVHWWOHPHQWVV\VWHP WR HQKDQFH WKH ,&7 FDSDFLWLHV RI WKH JHQHUDO SXEOLF DQGWKHJRYHUQPHQWDJHQFLHV$QRWKHUIDFWRUWKDWKDV 7KH0RQHWDU\DQG)LQDQFLDO$FW $FW1R RI KHOG EDFN WKH GHYHORSPHQW RI FRQQHFWLYLW\ LQ &XED 1RYHPEHUDXWKRUL]HVWKH0RQHWDU\%RDUGWR KDV EHHQ WKH \HDUORQJ WUDGH HPEDUJR LPSRVHG HVWDEOLVKUHTXLUHPHQWVIRUWKHDGPLVVLRQRIHYLGHQFH RQWKHFRXQWU\E\WKH8QLWHG6WDWHV LQHOHFWURQLFIRUPUHJDUGLQJEDQNLQJPDWWHUVDQGGHELW and credit card transactions, as well as any other tan DOMINICAN REPUBLIC JLEOHRUHOHFWURQLFSD\PHQWLQVWUXPHQW

7KH'RPLQLFDQ5HSXEOLFKDVHVWDEOLVKHGDOHJDOEDVLV ,QWKHVSKHUHRIJRYHUQPHQW$FW1RVWLSXODWHV IRUSURPRWLQJHFRPPHUFHDVDWRROIRUQDWLRQDOGH WKDWZKHQDVLJQDWXUHLVOHJDOO\UHTXLUHGRUFHUWDLQOH YHORSPHQW8QGHUWKH1DWLRQDO'HYHORSPHQW6WUDWHJ\ JDOFRQVHTXHQFHVƅRZIURPWKHDEVHQFHRIRQHWKH $FW $FW1R RI-DQXDU\WKH'RPLQL UHTXLUHPHQW PD\ EH VDWLVƄHG E\ D GLJLWDO GRFXPHQW FDQ5HSXEOLFSURPRWHVWKHXVHRI,&7VDVDPHDQVIRU RU GDWD PHVVDJH LI VDLG GRFXPHQW RU PHVVDJH KDV LQFUHDVLQJEXVLQHVVSURGXFWLYLW\DQGLPSURYLQJSXEOLF EHHQGLJLWDOO\VLJQHGDQGWKHGLJLWDOVLJQDWXUHPHHWV DGPLQLVWUDWLRQWKURXJKPRUHHIƄFLHQWDQGDFFHVVLEOH WKHUHTXLUHPHQWVIRUYDOLGLW\HVWDEOLVKHGLQWKLVODZ,W VHUYLFHV ,Q DGGLWLRQ WKH H&RPPHUFH 'RFXPHQWV stipulates that in any interaction with a public entity DQG'LJLWDO6LJQDWXUHV$FW $FW1R RI6HS WKDW UHTXLUHV D VLJQHG GRFXPHQW WKLV UHTXLUHPHQW WHPEHU  LQFOXGHV D QXPEHU RI SUHFHSWV WDNHQ PD\EHVDWLVƄHGE\RQHRUPRUHGLJLWDOGRFXPHQWVRU IURPWKH81&,75$/0RGHO/DZRQ(OHFWURQLF&RP GDWDPHVVDJHVGLJLWDOO\VLJQHGSXUVXDQWWRWKHSURYL PHUFH VLRQVRIWKLVODZ D  (OHFWURQLFWUDQVDFWLRQVHOHFWURQLFVLJQDWXUHV 'HFUHH 1R  DSSURYLQJ WKH UHJXODWLRQV IRU 7KHH&RPPHUFH'RFXPHQWVDQG'LJLWDO6LJQDWXUHV LPSOHPHQWDWLRQ RI $FW 1R  RI  $SULO  $FW $FW1R LVWKHPDLQOHJLVODWLRQRQHOHF GHVFULEHVLQJUHDWHUGHWDLOWKHSRZHUVRIWKH'RPLQL WURQLFWUDQVDFWLRQVDQGHOHFWURQLFVLJQDWXUHV,WGHƄQHV FDQ7HOHFRPPXQLFDWLRQV,QVWLWXWHDQGHVWDEOLVKHVWKH HFRPPHUFHDVDOOUHODWLRQVRIDFRPPHUFLDOQDWXUH UHTXLUHPHQWVIRUFHUWLƄFDWLRQHQWLWLHV%\'HFLVLRQ1R whether contractual or not, that are based on the use  RI  -DQXDU\  VXSSOHPHQWDU\ UXOH  RQ RIRQHRUPRUHGLJLWDOGRFXPHQWVRUGDWDPHVVDJHV $FW1RWKH'RPLQLFDQ7HOHFRPPXQLFDWLRQV RU RWKHU VLPLODU PHGLD 7KH $FW SURPRWHV IDFLOLWDWLQJ ,QVWLWXWH DGRSWHG VXSSOHPHQWDU\ UXOHV LQFOXGLQJ WKH FRPPHUFHDQGUHFRJQL]LQJWKHYDOLGLW\RIWUDQVDFWLRQV rule on authorization and accreditation procedures, FRQGXFWHGWKURXJKHOHFWURQLFPHDQVDVZHOODVWKH ZKLFK VHWV IRUWK JHQHUDO DVSHFWV WKH UHTXLUHPHQWV IXQFWLRQDOHTXLYDOHQFHRIGLJLWDOGRFXPHQWVDQGGDWD DQG WKH SURFHGXUH WR EH IROORZHG LQ UHTXHVWLQJ WKH PHVVDJHVZLWKUHVSHFWWRSULQWHGGRFXPHQWVDQGRI ,QVWLWXWHpVDXWKRUL]DWLRQWRRSHUDWHDVDUHJLVWU\XQLW II. REPORT ON LEGISLATION IN THE LATIN AMERICAN COUNTRIES 29

5HJDUGLQJ WD[HV WKH 7D[ 5HFWLƄFDWLRQ $FW $FW 1R 7KHULJKWWRSURWHFWLRQRISHUVRQDOGDWDLVHQVKULQHG   RI  'HFHPEHU  LQFRUSRUDWHV WKH LQ WKH &RQVWLWXWLRQ RI WKH 'RPLQLFDQ 5HSXEOLF RI  DELOLW\WRVWRUHWD[UHODWHGLQIRUPDWLRQLQGDWDVWRUDJH -DQXDU\8QGHUWKH&RQVWLWXWLRQDQGSXUVXDQW PHGLDXVHGLQFRPSXWHUV\VWHPV,WDOORZVWD[SD\HUV WRWKHFRPPLWPHQWVXQGHUWDNHQZLWKWKH,EHUR$PHU WRNHHSWKHLUDFFRXQWLQJUHFRUGVLQFOXGLQJUHFHLSWVRU LFDQ 'DWD 3URWHFWLRQ 1HWZRUN WKH 2UJDQLF $FW RQ SD\PHQWYRXFKHUVLQHOHFWURQLFPHGLDIRU\HDUV,W 3URWHFWLRQRI3HUVRQDO'DWD $FW1R RI DOVRDXWKRUL]HVWD[SD\HUVWRUHJLVWHUZLWKWD[DXWKRUL 'HFHPEHU  SURYLGHV IRU IXOO SURWHFWLRQ RI SHU WLHVLGHQWLƄFDWLRQDQGDFFHVVFRGHV 3,1V IRUVZRUQ sonal data contained in archives, public records, VWDWHPHQWV TXHULHV WD[ VHWWOHPHQWV DQG SD\PHQWV GDWDEDQNV RU RWKHU GDWDSURFHVVLQJ PHGLD XVHG WR DVZHOODVRWKHUSURFHGXUHVWKURXJKHOHFWURQLFPHDQV issue reports, whether public or private, as well as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ƄGHQWLDOLW\VH GXUHVIRUPDQDJLQJDOOIRUPDOLWLHVDQGVHUYLFHVQHHGHG FXULW\DQGSXUSRVHWKDWPXVWJRYHUQWKHSURFHVVLQJ IRUH[SRUWDFWLYLWLHV RIGDWD,WHVWDEOLVKHVWKHGXW\WRJXDUDQWHHWKHULJKW RIKDEHDVGDWDRURILQIRUPDWLRQIRUGDWDVXEMHFWVD 2QWKHLQWHUQDWLRQDOVFHQHLWLVZRUWKQRWLQJ'HFLVLRQ ULJKWWKDWPXVWEHXSKHOGE\WKHFRXUWV,WDOVRPDNHV 1R  RI  )HEUXDU\  DSSURYLQJ DFFHVVLRQ LWREOLJDWRU\WRHQVXUHWKDWLQIRUPDWLRQLVNHSWXQGHU WRWKH8QLWHG1DWLRQV&RQYHQWLRQRQWKH8VHRI(OHF VHFXUHFRQGLWLRQV,WSURWHFWVWKHULJKWRISHUVRQVWR WURQLF&RPPXQLFDWLRQVLQ,QWHUQDWLRQDO&RQWUDFWV KDYHDFFHVVWRXSGDWHFKDOOHQJHWKHSURFHVVLQJRI E  &RQVXPHUSURWHFWLRQ their information and correct or destroy data that un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that all commercial electronic communications must HYDQW LL LVVXHQRWLƄFDWLRQRIVKLSSLQJZLWKWKHQDPH EHODEHOOHGDVqDGYHUWLVLQJrLQWKHVXEMHFWƄHOGRIHDFK DQG DGGUHVV RI WKH SURYLGHU DQG WKH SUHFLVH JRRG PHVVDJH,WDOVRVWLSXODWHVWKDWLIWKHFRPPXQLFDWLRQ RU VHUYLFH EHLQJ SURYLGHG WR WKH FRQVXPHU LLL  SUR LQFOXGHVVH[XDOFRQWHQWWKDWVKRXOGRQO\EHUHDGE\ vide documentation of the delivery of the product DGXOWVLWVKDOOEHODEHOOHGqDGYHUWLVLQJIRUDGXOWVr or service to the consumer or user, or have such documentation provided to a duly authorized repre 7KH $FW VSHFLƄHV WKDW HOHFWURQLF FRPPHUFLDO FRP VHQWDWLYH LQ WKH IRUP RI SURRI RI UHFHLSW LY  SHUPLW PXQLFDWLRQVVHQWIURPDQHPDLODGGUHVVPXVWDOORZ WKHFRQVXPHUWRPDNHFODLPVDQGUHWXUQRUH[FKDQJH WKHUHFLSLHQWWRH[SUHVVKLVRUKHUZLVKWRQRWUHFHLYH SURGXFWVWKURXJKWKHVDPHPHGLXPDVZDVXVHGIRU FRPPHUFLDOFRPPXQLFDWLRQV,WDOVRVWDWHVWKDWFRP WKHVDOH Y FRYHUVKLSSLQJFRVWVLQFDVHRIH[FKDQJHV munications must include the name or business, RUUHSDLUVFRYHUHGE\JXDUDQWHH YL DOORZDPLQLPXP FRPSOHWHGRPLFLOHDQGHPDLODGGUHVVRIWKHVHQGHURI period of three days for the consumer to reconsider, WKHFRPPXQLFDWLRQ7KHVHQGHUPXVWLQFOXGHDYDOLG SULRU WR GHOLYHU\ YLL  SURYLGH IRU DQG DOORZ WKH FRQ DQGDFWLYHWHOHSKRQHQXPEHURUDYDOLGDQGDFWLYHH sumer a minimum trial period of seven business days mail address for replies, so that the recipient can send IRUUHWXUQLQJWKHJRRGRUVXVSHQGLQJWKHVHUYLFHFRQ DPHVVDJHWRQRWLI\KLVRUKHUGHVLUHWRQRWUHFHLYHDQ\ WUDFWDQG YLLL LVVXHDQGGHOLYHUWRWKHFRQVXPHURU IXUWKHUFRPPHUFLDOFRPPXQLFDWLRQV XVHUDZULWWHQRUGLJLWDOLQYRLFH 7KH$FWSURKLELWVWKHVHQGLQJGLUHFWO\RULQGLUHFWO\RI F  3URWHFWLRQRISHUVRQDOGDWD commercial communications that have not been re 30 Study on the harmonization of cyberlegislation in Latin America

TXHVWHGRUFRQVHQWHGWRE\WKHUHFLSLHQWFRQFHUQHG • %HUQH &RQYHQWLRQ IRU WKH 3URWHFWLRQ RI /LWHUDU\ 1HYHUWKHOHVV LW SURYLGHV WKDW VHQGLQJ XQVROLFLWHG DQG$UWLVWLF:RUNV FRPPHUFLDOFRPPXQLFDWLRQVVKDOOQRWJLYHULVHWRWKH • &RQYHQWLRQ IRU WKH 3URWHFWLRQ RI 3URGXFHUV RI DFWLRQVDQGVDQFWLRQVHQYLVDJHGLQWKHODZZKHQWKH 3KRQRJUDPV$JDLQVW8QDXWKRUL]HG'XSOLFDWLRQRI recipient has or has had a prior commercial relationship 7KHLU3KRQRJUDPV *HQHYD&RQYHQWLRQ ZLWKWKHVHQGHURUZKHQWKHUHFLSLHQWKDVH[SUHVVHG • ,QWHUQDWLRQDO&RQYHQWLRQIRUWKH3URWHFWLRQRI3HU KLVRUKHUDJUHHPHQWWRUHFHLYHWKHFRPPXQLFDWLRQ,W IRUPHUV 3URGXFHUV RI 3KRQRJUDPV DQG %URDG also prohibits communications that are sent, directly FDVWLQJ2UJDQL]DWLRQV 5RPH&RQYHQWLRQ RU LQGLUHFWO\ ZLWKRXW KDYLQJ EHHQ UHTXHVWHG RU H[ SUHVVO\DJUHHGWRE\WKHUHFLSLHQWFRQFHUQHGRUZKHQ • $JUHHPHQWRQ7UDGH5HODWHG$VSHFWVRI,QWHOOHF WKHFRQWHQWRIWKHLQIRUPDWLRQLVIDOVHRUPLVOHDGLQJLQ WXDO3URSHUW\5LJKWV 75,36 DGPLQLVWHUHGE\:72 UHJDUGWRWKHVXEMHFWRUGRHVQRWFRLQFLGHZLWKWKH H  'RPDLQQDPHV FRQWHQWRIWKHPHVVDJH :LWK UHJDUG WR GRPDLQ QDPHV WKH FRXQWU\pV 1,& 2QWKHLQWHUQDWLRQDOIURQWWKH(FRQRPLF3DUWQHUVKLS KWWSZZZQLFGR ZKLFKLVKRXVHGDW3RQWLƄFLD8QL $JUHHPHQW EHWZHHQ WKH 0HPEHU &RXQWULHV RI WKH YHUVLGDG &DWÐOLFD 0DGUH \ 0DHVWUD DGPLQLVWHUV WKH &DULEEHDQ)RUXPDQGRIWKH*URXSRI$IULFDQ6WDWHV FRXQWU\pVWRSOHYHOGRPDLQQDPHGR,WVSROLFLHVPDNH WKH&DULEEHDQDQGWKH3DFLƄ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ƄF DUWLVWLF DQG OLWHUDU\ YRNHWKHDVVLJQPHQWRIDGRPDLQWRDQRUJDQL]DWLRQ productions, for the period and in the manner stipu RULQGLYLGXDOLIWKHRUJDQL]DWLRQWKDWRZQVWKHGRPDLQpV ODWHGE\ODZ WUDGHPDUNUHTXHVWVWKHGRPDLQ 7KH,QGXVWULDO3URSHUW\$FW $FW1R VWDWHVWKDW I  &\EHUFULPH PDWKHPDWLFDOPHWKRGVDQGFRPSXWHUSURJUDPVVKDOO $FW1RRQKLJKWHFKQRORJ\FULPHVDQGPLV QRW EH FRQVLGHUHG SDWHQWDEOH LQYHQWLRQV :LWK UH GHPHDQRXUVRI$SULOLQFOXGHVDQXPEHURI JDUGWRWKHXVHRIWUDGHPDUNV$FW1RPDNHV SURYLVLRQVHQYLVDJHGLQWKH&RXQFLORI(XURSHpV&RQ QRPHQWLRQRIWKHLUXVHRQWKH,QWHUQHWRULQGRPDLQ YHQWLRQ RQ &\EHUFULPH 6XEVWDQWLYH SURYLVLRQV IURP QDPHV WKH&RQYHQWLRQLQFOXGHGHƄQLWLRQVRIFULPHVLQYROYLQJ 7KH&RS\ULJKW$FW $FW1R RI-XO\ ,7V\VWHPV3URFHGXUDOSURYLVLRQVFRYHUPHFKDQLVPV FRQVLGHUV FRPSXWHU SURJUDPV DQG GDWDEDVHV WR EH IRUFRPEDWLQJWKLVW\SHRIFULPHE\IDFLOLWDWLQJFRRS SURWHFWHGZRUNV:LWKUHJDUGWRWKHUHODWHGULJKWVRI eration between the State and the private sector at the DUWLVWVSHUIRUPHUVDQGEURDGFDVWLQJRUJDQL]DWLRQVLW QDWLRQDOOHYHOWRGHWHFWLQYHVWLJDWHDQGSXQLVKVXFK GHƄQHV WKH FRQFHSWV RI SKRQRJUDP DQG YLGHRJUDP crimes, as well as provisions for rapid and reliable in DQGUHFRJQL]HVWKHULJKWRISXEOLFDWLRQLQDQ\PHGLXP WHUQDWLRQDOFRRSHUDWLRQ 7KH $FW GHƄQHV KLJKWHFKQRORJ\ FULPHV DV FRQGXFW 2Q WKH LQWHUQDWLRQDO LQWHOOHFWXDO SURSHUW\ ULJKWV IURQW WKDWMHRSDUGL]HVOHJDOULJKWVSURWHFWHGE\WKH&RQVWLWX WKH'RPLQLFDQ5HSXEOLFKDVUDWLƄHGWKHIROORZLQJLQ WLRQDQGE\ODZVGHFUHHVUHJXODWLRQVDQGUHVROXWLRQV VWUXPHQWV UHODWLQJWRLQIRUPDWLRQV\VWHPV,WLQFOXGHVVHYHUDOGHI • :,32 &RS\ULJKW 7UHDW\ DQG :,32 3HUIRUPDQFHV LQLWLRQVLQFOXGLQJGHƄQLWLRQVRILOOLFLWDFFHVVFORQLQJ DQG3KRQRJUDPV7UHDW\ malicious codes, user data, diversion of contracted • 3URWRFRO WR WKH &HQWUDO $PHULFDQ $JUHHPHQW IRU IDFLOLWLHVHOHFWURQLFLQWHUFHSWLRQDQGWUDQVIHURIIXQGV WKH3URWHFWLRQRI,QGXVWULDO3URSHUW\ 7KH$FWGHƄQHVDQXPEHURIFULPHVDJDLQVWFRQƄGHQ WLDOLW\LQWHJULW\DQGDYDLODELOLW\RIGDWDDQGLQIRUPDWLRQ 'RPLQLFDQ 5HSXEOLF&HQWUDO $PHULFD8QLWHG • V\VWHPVDVZHOODVFULPHVRIFRQWHQWFULPHVDJDLQVW 6WDWHV)UHH7UDGH$JUHHPHQW &$)7$'5 LQWHOOHFWXDO SURSHUW\ FULPHV DJDLQVW WHOHFRPPXQL • 3DULV &RQYHQWLRQ IRU WKH 3URWHFWLRQ RI ,QGXVWULDO FDWLRQV DQG FULPHV DJDLQVW WKH QDWLRQ DQG DFWV RI 3URSHUW\  WHUURULVP II. REPORT ON LEGISLATION IN THE LATIN AMERICAN COUNTRIES 31

,WDOVRHVWDEOLVKHVZKLFKHQWLWLHVKDYHWKHDXWKRULW\WR J  3HQGLQJOHJLVODWLRQDQGFKDOOHQJHV LQYHVWLJDWHDQGSURVHFXWHF\EHUFULPHVZLWKHPSKD 7KH'RPLQLFDQ5HSXEOLFQHHGVWRKDYHDVWUDWHJ\RU VLVRQWKHLQWHUDFWLRQEHWZHHQWKH3XEOLF3URVHFXWLRQ QDWLRQDO SROLF\ RQ ODUJHVFDOH F\EHUVHFXULW\ DV ZHOO 6HUYLFHDQGWKH'HSDUWPHQWRI7HOHFRPPXQLFDWLRQV DVDQDWLRQDOFRPSXWHUHPHUJHQF\UHVSRQVHWHDPWR ,QWHOOHFWXDO 3URSHUW\ DQG H&RPPHUFH RI WKH 2IƄFH GHDOZLWKFRPSXWHUVHFXULW\LQFLGHQWV RI WKH $WWRUQH\ *HQHUDO ,W FUHDWHV WKH ,QWHU$JHQF\ &RPPLVVLRQ DJDLQVW +LJK7HFKQRORJ\ &ULPHV DQG 0LVGHPHDQRXUVDQGWKH'HSDUWPHQWIRU,QYHVWLJDWLRQ ECUADOR RI+LJK7HFKQRORJ\&ULPHVDQG0LVGHPHDQRXUV7KLV 7KH H&RPPHUFH (OHFWURQLF 6LJQDWXUHV DQG 'DWD ODWWHUGHSDUWPHQWLVWKHFRXQWU\pVRIƄ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contained in an information system or its components, URSHDQ &RXQFLO GLUHFWLYH RQ HFRPPHUFH DQG WKH WUDIƄF GDWD FRQQHFWLRQ GDWD DFFHVV GDWD DQG DQ\ GLUHFWLYHRQHOHFWURQLFVLJQDWXUHV7KH$FWDVVLJQVWR RWKHULQIRUPDWLRQXVHIXOLQWKHLQYHVWLJDWLRQRIFULPHV GDWDPHVVDJHVWKHVDPHOHJDOVWDWXVDVWKDWRIZULW FRYHUHGE\WKH$FW WHQGRFXPHQWVDQGWRHOHFWURQLFVLJQDWXUHVWKHVDPH VWDWXV DV KDQGZULWWHQ VLJQDWXUHV ,W DOVR HVWDEOLVKHV ,WDOVRUHTXLUHVVHUYLFHSURYLGHUVWRSUHVHUYHGDWDRQ UHTXLUHPHQWV WKDW PXVW EH PHW E\ WKH LQIRUPDWLRQ WUDIƄFFRQQHFWLRQDFFHVVDQGDQ\RWKHULQIRUPDWLRQ FRQWDLQHGLQDGDWDPHVVDJHLQRUGHUIRULWWREHFRQ XVHIXOLQWKHLQYHVWLJDWLRQIRUDPLQLPXPSHULRGRI VLGHUHGRULJLQDO GD\V 7KH $FW DXWKRUL]HV WKH GHPDWHULDOL]DWLRQ RI GRFX $FW 1R  RI  $XJXVW  ZKLFK JRYHUQV PHQWVSURYLGHGWKDWWKHGLJLWL]HGGRFXPHQWVFRQWDLQ WKHVHQGLQJRIXQVROLFLWHGFRPPHUFLDOHPDLOV VSDP  GXO\FHUWLƄHGHOHFWURQLFVLJQDWXUHV,WDOVRHVWDEOLVKHV GHƄQHV WKH IROORZLQJ EHKDYLRXUV DV F\EHUFULPHV L  WKHUHTXLUHPHQWVWKDWPXVWEHPHWE\HOHFWURQLFVLJ JDLQLQJ DFFHVV WR D FRPSXWHU V\VWHP ZLWKRXW DX QDWXUHVDQGHOHFWURQLFVLJQDWXUHFHUWLƄFDWLRQVDVZHOO WKRUL]DWLRQ DQG LQWHQWLRQDOO\ LQLWLDWLQJ WUDQVPLVVLRQ RI DV WKH REOLJDWLRQV DQG UHVSRQVLELOLWLHV RI DFFUHGLWHG FRPPHUFLDO FRPPXQLFDWLRQV IURP RU WKURXJK WKDW LQIRUPDWLRQFHUWLƄFDWLRQHQWLWLHV,WUHFRJQL]HVWKHHYL V\VWHP LL JDLQLQJDFFHVVWRDFRPSXWHUV\VWHPWR GHQWLDOYDOXHRIGDWDPHVVDJHVHOHFWURQLFVLJQDWXUHV forward or resend commercial communications with HOHFWURQLF GRFXPHQWV DQG GRPHVWLF RU IRUHLJQ HOHF WKH LQWHQWLRQ RI GHFHLYLQJ WKH UHFLSLHQWV DERXW WKH WURQLFFHUWLƄFDWHVVXEMHFWWRWKHFRQGLWLRQVODLGGRZQ RULJLQ RI WKRVH PHVVDJHV LLL  XVLQJ D IDOVH VXEMHFW LQWKH$FW,QDGGLWLRQLWHVWDEOLVKHVDGPLQLVWUDWLYHDQG OLQHRQDGDWDPHVVDJHFRQWDLQLQJFRPPHUFLDOFRP criminal sanctions for failure to comply with such pro PXQLFDWLRQDQGLQWHQWLRQDOO\LQLWLDWLQJWUDQVPLVVLRQRI YLVLRQV VDPH LY  UHJLVWHULQJ DQG FROOHFWLQJ IUDXGXOHQWO\ RU maliciously, with false information, the identity of the 7KHUHJXODWLRQVWRWKHH&RPPHUFH(OHFWURQLF6LJQD HPDLO DFFRXQW KROGHU RU HPDLO DGGUHVV RI SXEOLF WXUHVDQG'DWD0HVVDJHV$FWLVVXHGE\'HFUHH1R access sites, such as chat sites, public directories,  RI  'HFHPEHU  VHW WKH UHTXLUH QHZVJURXSVRQOLQHSURƄOHVHUYLFHVVRFLDOQHWZRUNV PHQWV WKDW PXVW EH PHW IRU D GDWD PHVVDJH WR EH DQG DQ\ RWKHU PDVV PHGLXP WKDW XVHV JURXSV RI FRQVLGHUHGDFFHVVLEOHIRUFRQVXOWDWLRQDQGDVVLJQWR electronic addresses, or of a domain name, and inten this form of data the same value as that of a written WLRQDOO\ LQLWLDWLQJ WUDQVPLVVLRQ RI PXOWLSOH FRPPHUFLDO GRFXPHQW,WDOVRUHIHUVWRWKHHOHPHQWVDQGSULQFLSOHV communications from any combination of such ac JRYHUQLQJ WKH HOHFWURQLF VLJQDWXUH LQIUDVWUXFWXUH DQG FRXQWVRUGRPDLQVZLWKRXWDXWKRUL]DWLRQRIWKHHPDLO WKHZRUNRILQIRUPDWLRQFHUWLƄFDWLRQHQWLWLHVDVZHOODV account holder or the operator of the access site, and RIWLPHVWDPSLQJVHUYLFHV Y  RIIHULQJ IRU VDOH GDWDEDVHV FRQWDLQLQJ HPDLO DG 7KHDIRUHPHQWLRQHGUHJXODWLRQVVHWUXOHVIRUDFFUHGL GUHVVHVZLWKRXWWKHH[SUHVVFRQVHQWRIWKHRZQHUVRI WDWLRQUHJLVWUDWLRQDQGUHJXODWLRQRIHQWLWLHVDXWKRUL]HG WKHGDWDEDVHVIRUWKHSXUSRVHRIJHQHUDWLQJXQVROLF WR SURYLGH LQIRUPDWLRQ FHUWLƄFDWLRQ DQG UHODWHG VHU LWHGFRPPHUFLDOFRPPXQLFDWLRQV YLFHVDVZHOODVIRUUHODWHGWKLUGSDUWLHV,WHVWDEOLVKHV 32 Study on the harmonization of cyberlegislation in Latin America

VWDQGDUGVDQGSURFHGXUHVWREHIROORZHGLQSURYLGLQJ E\WKH0RQHWDU\DQG)LQDQFLDO3ROLF\DQG5HJXODWLRQ LQIRUPDWLRQ FHUWLƄFDWLRQ VHUYLFHV LVVXLQJ HOHFWURQLF %RDUG RQ  1RYHPEHU  OD\V GRZQ VWDQGDUGV VLJQDWXUH FHUWLƄFDWHV DQG UHJLVWHULQJ GDWD DQG WLPH IRUWKHXVHRIWKLVPHDQVRISD\PHQWZKLFKLVUHFRJ VWDPSV,WDOVRSURYLGHVPRUHGHWDLOHGUXOHVRQWKHRS QL]HGE\HFRQRPLFDJHQWVDQGPDQDJHGH[FOXVLYHO\ HUDWLRQRIWKHSXEOLFNH\LQIUDVWUXFWXUHDQGDXWKRUL]HV E\WKH&HQWUDO%DQN,WLVXVHGLQHOHFWURQLFPRELOH entities, State institutions and public corporations to HOHFWURPHFKDQLFDO DQG Ƅ[HG GHYLFHV VPDUW FDUGV REWDLQHOHFWURQLFVLJQDWXUHFHUWLƄFDWHVIURPDFFUHGLWHG computers and other means produced as a result of LQIRUPDWLRQ FHUWLƄFDWLRQ DQG UHODWHG VHUYLFHV XQGHU WHFKQRORJLFDODGYDQFHV SXEOLFRUSULYDWHODZ ,Q WKH DUHD RI WD[HV ERWK WKH 7D[&RGH RI  -XQH ,QWKHDUHDRIHOHFWURQLFWUDQVDFWLRQVE\JRYHUQPHQW DVDPHQGHGRQ0DUFKDQGWKHH&RP HQWLWLHVWKH2UJDQLF$FWRQWKH1DWLRQDO3XEOLF&RQ PHUFH(OHFWURQLF6LJQDWXUHVDQG'DWD0HVVDJHV$FW WUDFWLQJ6\VWHPRI$XJXVWJRYHUQVHOHFWURQLF HVWDEOLVKWKHYDOLGLW\RIHOHFWURQLFQRWLƄFDWLRQV7KH$FW FRQWUDFWLQJ SURFHGXUHV IRU JRYHUQPHQW DJHQFLHV GHƄ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ƄFDWLRQRIIRUPDOLWLHVRI1RYHPEHUGHƄQHV WKURXJK HOHFWURQLF VLJQDWXUH FHUWLƄFDWHV 7KH ,QWHU qHJRYHUQPHQWrDVWKHXVHE\JRYHUQPHQWDJHQFLHVRI QDO5HYHQXH6HUYLFHPDNHVLWSRVVLEOHWRVXEPLWWD[ ,&7VWRWUDQVIRUPUHODWLRQVZLWKFLWL]HQVDQGEHWZHHQ IRUPVDQGPDNHSD\PHQWVRQOLQHDQGWRLPSOHPHQW JRYHUQPHQW DJHQFLHV DQG SULYDWH EXVLQHVVHV LQ RU HOHFWURQLFLQYRLFLQJ GHUWRLPSURYHWKHTXDOLW\RIJRYHUQPHQWVHUYLFHVWR citizens, promote interaction with private businesses, E  &RQVXPHUSURWHFWLRQ VWUHQJWKHQ FLWL]HQ SDUWLFLSDWLRQ WKURXJK DFFHVV WR 7KH&RQVWLWXWLRQRI(FXDGRUVWDWHVWKDWSHRSOHKDYH LQIRUPDWLRQ DQG HIƄFLHQW DQG HIIHFWLYH JRYHUQPHQW WKHULJKWWRKDYHJRRGVDQGVHUYLFHVRIRSWLPXPTXDO services and contribute to transparency, participation LW\ DQG WR VHOHFW WKHP IUHHO\DV ZHOO DV WKH ULJKW WR DQGFLWL]HQFROODERUDWLRQ7KH'HFUHHSURPRWHVSODQV UHFHLYH DFFXUDWH DQG QRQGHFHSWLYH LQIRUPDWLRQ RQ IRUVLPSOLI\LQJIRUPDOLWLHVLQWKHFHQWUDODQGLQVWLWXWLRQDO WKH FRQWHQW DQG FKDUDFWHULVWLFV RI VXFK JRRGV RU SXEOLF DGPLQLVWUDWLRQ LQ NHHSLQJ ZLWK WKH SULQFLSOHV VHUYLFHV,WDOVRUHJXODWHVOHJDOTXDOLW\FRQWUROPHFKD RI VLPSOLFLW\ HFRQRP\ OHJDOLW\ FHOHULW\ SUHVXPSWLRQ QLVPV DQG FRQVXPHUSURWHFWLRQ SURFHGXUHV DV ZHOO of truthfulness, reliability of information, privacy and DVVDQFWLRQVIRUYLRODWLQJFRQVXPHUULJKWV FRQƄGHQWLDOLW\ RI SHUVRQDO LQIRUPDWLRQ WUDQVSDUHQF\ 7KH 2UJDQLF $FW RQ &RQVXPHU 3URWHFWLRQ $FW 1R preference for retrospective [rather than preventive]   RI  -XO\  HVWDEOLVKHV FRQVXPHUVp FRQWUROVPLQLPL]LQJIRUPDOLWLHVDFWLQJIRUWKHEHQHƄW ULJKW WR WKH SURWHFWLRQ RI WKHLU OLIH KHDOWK DQG VDIHW\ RI WKH FLWL]HQ SURYLGLQJ VHUYLFHV IUHH RI FKDUJH DQG DVFRQVXPHUVRIJRRGVDQGVHUYLFHVDVZHOODVWKHLU LQWHUFRQQHFWLRQ ULJKWWRSURWHFWLRQIURPPLVOHDGLQJRUDEXVLYHDGYHU 7KHLQWHURSHUDELOLW\RIJRYHUQPHQWVHUYLFHVKDVEHHQ WLVLQJ,WDOVRLQFOXGHVWKHULJKWWRUHFHLYHDSSURSULDWH LPSOHPHQWHGLQWKUHHDUHDV L DXWRPDWLRQRIIRUPDOL truthful, clear, timely and complete information on WLHVDQGRSWLPL]DWLRQRISURFHGXUHV LL UHJLVWUDWLRQRI JRRGVDQGVHUYLFHV SXEOLFGDWDDQG LLL ƄQDQFLDOGDWD7KH1DWLRQDO6HF 8QGHU WKH H&RPPHUFH (OHFWURQLF 6LJQDWXUHV DQG UHWDULDWRIWKH3XEOLF$GPLQLVWUDWLRQKDVLPSOHPHQWHG 'DWD0HVVDJHV$FWEHIRUHDFRQVXPHURUXVHULQGL WKH 48,38; RQOLQH V\VWHP IRU KDQGOLQJ GRFXPHQWD cates his or her acceptance of electronic records or WLRQRISXEOLFDQGSULYDWHVHFWRUHQWLWLHV GDWDPHVVDJHVKHRUVKHPXVWEHLQIRUPHGFOHDUO\ 2QWKHƄ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

FRQVXPHUVIURPOLVWVPHVVDJHFKDLQVDQGGDWDEDVHV DVVHWV RU SURSHUW\DQG RI XVHUV RI SXEOLF UHJLVWULHV LQFRQQHFWLRQZLWKVHQGLQJGDWDPHVVDJHVZLWKLQIRU 3HUVRQDOGDWDPXVWEHNHSWFRQƄ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ƄFD WLRQ RQ WKHLU UHOLJLRXV EHOLHIV RU DVVRFLDWLRQV RU WKHLU WLRQLQIRUPDWLRQ SROLWLFDOWKRXJKWDVZHOODVGDWDRQWKHLUKHDOWKDQG G  ,QGXVWULDODQGLQWHOOHFWXDOSURSHUW\ VH[XDOOLIHH[FHSWDVQHFHVVDU\IRUPHGLFDOFDUH ,QWKHDUHDRILQWHOOHFWXDOSURSHUW\ULJKWVWKH&RQVWL ,WDOVRUHFRJQL]HVWKHULJKWRIGDWDVXEMHFWVWRNQRZRI WXWLRQ RI (FXDGRU JXDUDQWHHV WKH ULJKW RI LQGLYLGXDOV the use, purpose, source and destination of their infor WRGHYHORSWKHLUFUHDWLYHFDSDFLWLHVWRHQJDJHLQDQ PDWLRQ3HUVRQVUHVSRQVLEOHIRUGDWDEDVHVFRQWDLQLQJ RQJRLQJDQGDSSURSULDWHIDVKLRQLQFXOWXUDODQGDUWLV personal information may disseminate the archived in WLFDFWLYLWLHVDQGWRHQMR\SURWHFWLRQRIWKHPRUDODQG IRUPDWLRQZLWKWKHDXWKRUL]DWLRQRIWKHGDWDVXEMHFWRU SDWULPRQLDOULJKWVDVVRFLDWHGZLWKWKHLUVFLHQWLƄFOLWHU LIUHTXLUHGE\ODZWRGRVR DU\RUDUWLVWLFSURGXFWLRQV ,Q WKH LQWHUQDWLRQDO VSKHUH (FXDGRU KDV VLJQHG WKH 8QGHUWKH&RQVWLWXWLRQWKHGDWDVXEMHFWPD\UHTXHVW IROORZLQJLQVWUXPHQWV WKDWWKHSDUW\UHVSRQVLEOHIRUKDQGOLQJKLVRUKHULQIRU PDWLRQSURYLGHKLPRUKHUDFFHVVWRWKHUHOHYDQWƄOHV • :,32 &RS\ULJKW 7UHDW\ DQG :,32 3HUIRUPDQFHV ZLWKRXW FKDUJH DQG WKDW KH RU VKH EH SHUPLWWHG WR DQG3KRQRJUDPV7UHDW\ XSGDWHFRUUHFWUHPRYHRUDQQXOWKHGDWD:KHQVHQ • %HUQH &RQYHQWLRQ IRU WKH 3URWHFWLRQ RI /LWHUDU\ sitive information is involved, the information may not DQG$UWLVWLF:RUNV EHDUFKLYHGZLWKRXWDXWKRUL]DWLRQRIWKHGDWDVXEMHFW • ,QWHUQDWLRQDO&RQYHQWLRQIRUWKH3URWHFWLRQRI3HU DQGVHFXULW\PHDVXUHVDUHPDQGDWRU\7KH&RQVWLWX IRUPHUV 3URGXFHUV RI 3KRQRJUDPV DQG %URDG WLRQDOVRUHFRJQL]HVWKHLQYLRODELOLW\DQGFRQƄGHQWLDOLW\ FDVWLQJ2UJDQL]DWLRQV 5RPH&RQYHQWLRQ  RISK\VLFDODQGYLUWXDOFRUUHVSRQGHQFH8QGHUWKHH &RPPHUFH(OHFWURQLF6LJQDWXUHVDQG'DWD0HVVDJHV • 8QLYHUVDO&RS\ULJKW&RQYHQWLRQ $FW WKH FRQƄGHQWLDOLW\ DQG QRQGLVFORVXUH RI GDWD • &RPPRQ 3URYLVLRQV RQ &RS\ULJKW DQG 5HODWHG PHVVDJHVPXVWEHSURWHFWHG7KH$FWPDNHVSXQLVK 5LJKWVHVWDEOLVKHGE\'HFLVLRQRIWKH&RP DEOHDQ\YLRODWLRQtWKURXJKHOHFWURQLFLQWUXVLRQLOOHJDO PLVVLRQRIWKH$QGHDQ&RPPXQLW\ &RPPLVVLRQRI WUDQVIHURIGDWDPHVVDJHVRUYLRODWLRQRISURIHVVLRQDO &DUWDJHQD ZKLFKLVLQIRUFHIRUDOOFRXQWULHVRIWKH FRQƄGHQWLDOLW\tRIWKHVHSULQFLSOHV,WDOVRVWLSXODWHV $QGHDQ&RPPXQLW\ WKDWSUHSDULQJWUDQVIHUULQJRUXVLQJGDWDEDVHVFRP (FXDGRUKDVDOVRUDWLƄHGWKH$JUHHPHQWRQ7UDGH5H piled directly or indirectly from the use or transmission ODWHG$VSHFWVRI,QWHOOHFWXDO3URSHUW\5LJKWV 75,36  RIGDWDPHVVDJHVUHTXLUHVWKHH[SUHVVFRQVHQWRIWKH DGPLQLVWHUHGE\:72 GDWDVXEMHFWXQOHVVWKHGDWDDUHGHULYHGIURPSXEOLFO\ DYDLODEOH VRXUFHV 7KH GDWD VXEMHFW KDV WKH ULJKW WR ,QWKHFRQWH[WRIGRPHVWLFOHJLVODWLRQWKH,QWHOOHFWXDO decide what information will be shared with third par 3URSHUW\$FWRI0D\SURWHFWVFRS\ULJKWDQG WLHV UHODWHGULJKWVDVZHOODVLQGXVWULDOSURSHUW\,QWKHDUHD RIFRS\ULJKWWKHUHDUHSURYLVLRQVIRUWKHSURWHFWLRQRI 8QGHU WKH 2UJDQLF $FW RQ WKH 1DWLRQDO 3XEOLF &RQ FRPSXWHUSURJUDPVDQGGDWDEDVHV WUDFWLQJ6\VWHPRI$XJXVWGDWDSURYLGHGWR WKH SRUWDO DW ZZZFRPSUDVSXEOLFDVJRYHF DUH FRQ H  'RPDLQQDPHV VLGHUHG FRQƄGHQWLDO DQG PD\ RQO\ EH XVHG IRU WKH ,Q UHJDUG WR GRPDLQ QDPHV 1,&HF LV WKH HQWLW\ SXUSRVHVIRUZKLFKWKH\KDYHEHHQSURYLGHG UHVSRQVLEOHIRUDGPLQLVWHULQJWKHHFGRPDLQE\GHO HJDWLRQIURP,$1$,QWHUPVRIGRPDLQQDPHGLVSXWH 7KH 2UJDQLF $FW RQ WKH 1DWLRQDO 5HJLVWU\ RI 3XEOLF UHVROXWLRQ1,&HFKDVDGRSWHGWKHDUELWUDWLRQSURFH 'DWD RI  0DUFK  OD\V GRZQ WKH REOLJDWLRQV GXUHHQYLVDJHGLQWKH,&$118QLIRUP'RPDLQ1DPH of public and private sector institutions that currently 'LVSXWH5HVROXWLRQ3ROLF\ PDQDJHRUPD\LQIXWXUHPDQDJHGDWDEDVHVRUUHJLV WULHVRISXEOLFGDWDRQLQGLYLGXDOVRUOHJDOHQWLWLHVWKHLU I  &\EHUFULPHDQGLQIRUPDWLRQVHFXULW\ 34 Study on the harmonization of cyberlegislation in Latin America

&\EHUFULPHV DUH LQFOXGHG LQ WKH 2UJDQLF &RPSUH SURSRVLQJDUHJXODWRU\V\VWHPWKDWZLOOEHLQOLQHZLWK KHQVLYH &ULPLQDO &RGH RI  )HEUXDU\  ZKLFK WKH'LUHFWLYHVIRU+DUPRQL]DWLRQRI'DWD3URWHFWLRQLQ SXQLVKHV L YLRODWLRQVRISULYDF\FRPPLWWHGE\DQ\RQH WKH,EHUR$PHULFDQ&RPPXQLW\LVVXHGE\WKH,EHUR ZKRZLWKRXWSURSHUDXWKRUL]DWLRQNHHSVUHFRUGVUH $PHULFDQ 'DWD 3URWHFWLRQ 1HWZRUN ,Q WKH DUHD RI produces, disseminates or publishes personal data, information security, a national cybersecurity incident GDWD PHVVDJHV YRLFH DXGLR DQG YLGHR SRVWDO RE UHVSRQVHWHDPKDVQRW\HWEHHQVHWXS MHFWV LQIRUPDWLRQ FRQWDLQHG LQ VRIWZDUH SULYDWH RU FRQƄGHQWLDO FRPPXQLFDWLRQV RI DQRWKHU SHUVRQ LL  EL SALVADOR IUDXGXOHQW DSSURSULDWLRQ E\ HOHFWURQLF PHDQV LLL  UH SURJUDPPLQJRUPRGLƄFDWLRQRILQIRUPDWLRQRQPRELOH (O6DOYDGRUKDVDQXPEHURIODZVIRUGHDOLQJZLWKGLI WHUPLQDOV LY H[FKDQJHVDOHRUSXUFKDVHRILQIRUPD IHUHQW HFRPPHUFH LVVXHV ,Q WHUPV RI VXEVWDQWLYH WLRQ RQ PRELOH WHUPLQDOV Y  VXSSUHVVLRQ DOWHUDWLRQ ODZSURYLVLRQVIURPWKHIROORZLQJDUHDSSOLHGWKH&LYLO RU DVVXPSWLRQ RI LGHQWLW\ DQG PDULWDO VWDWXV YL  LOOH &RGH RI  $SULO  ZKLFK KDV EHHQ DPHQGHG JDOGLVFORVXUHRIGDWDEDVHV YLL LOOHJDOLQWHUFHSWLRQRI several times, PRVW UHFHQWO\ RQ  2FWREHU  GDWD YLLL HOHFWURQLFWUDQVIHURIPDWHULDODVVHWV L[ DW WKH&RPPHUFLDO&RGHRI-XO\PRVWUHFHQWO\ WDFNVDJDLQVWWKHLQWHJULW\RI,7V\VWHPV [ RIIHQFHV DPHQGHGRQ0D\WKH&RQVXPHU3URWHFWLRQ DJDLQVW OHJDOO\ UHVHUYHG SXEOLF LQIRUPDWLRQ DQG [L  $FWRI0D\PRVWUHFHQWO\DPHQGHGRQ access without consent to a computer, telematic or )HEUXDU\WKH7D[&RGHRI'HFHPEHU WHOHFRPPXQLFDWLRQVV\VWHPV PRVWUHFHQWO\DPHQGHGRQ'HFHPEHUDQG WKH&XVWRPV6LPSOLƄFDWLRQ$FWRI-DQXDU\ ,Q WHUPV RI SURFHGXUH WKH 2UJDQLF &RPSUHKHQVLYH PRVWUHFHQWO\DPHQGHGRQ-XO\ &ULPLQDO&RGHOD\VGRZQUXOHVIRULQWHUFHSWLQJFRP ,QWHUPVRISURFHGXUDOODZWKH&RGHRI&LYLODQG0HU munications or computer data pursuant to a court FDQWLOH3URFHGXUHRI1RYHPEHUDVDPHQGHG RUGHUDQGGHƄQHVWKHWHUPqGLJLWDOFRQWHQWr RQ0D\UHFRJQL]HVWKHSUREDWLYHYDOLGLW\RI $VUHJDUGVVHFXULW\RILQIRUPDWLRQ'HFLVLRQ-% GDWD DQG GDWD RU LQIRUPDWLRQ VWRUDJH UHVRXUFHV LQ  RI WKH %DQNLQJ $XWKRULW\ RI  $SULO  FOXGLQJ PDJQHWLF PHGLD DQG VRIWZDUH DQG DGPLWV UHTXLUHV ƄQDQFLDO LQVWLWXWLRQV WR LPSOHPHQW VHFXULW\ WKHPDVHYLGHQFHLQFRXUWSURFHHGLQJV PHDVXUHV IRU WKHLU HOHFWURQLF FKDQQHOV LQFOXGLQJ D  (OHFWURQLFWUDQVDFWLRQVHOHFWURQLFVLJQDWXUHV WKRVH XVHG WR SURYLGH PRELOH EDQNLQJ VHUYLFHV LQ RUGHUWRHQVXUHWKDWWUDQVDFWLRQVFDUULHGRXWWKURXJK :LWKUHJDUGWRHOHFWURQLFWUDQVDFWLRQVDQGHOHFWURQLF those channels have the necessary controls and se VLJQDWXUHV QHLWKHU WKH &LYLO &RGH QRU WKH &RPPHU curity measures and elements to prevent fraudulent FLDO &RGH H[SOLFLWO\ UHJXODWHV HOHFWURQLF FRQWUDFWLQJ HYHQWVDQGJXDUDQWHHWKHVHFXULW\DQGTXDOLW\RIXVHU 1HYHUWKHOHVVWKHUXOHVDSSO\LQJWRWKHIRUPDWLRQDQG LQIRUPDWLRQDVZHOODVFOLHQWVpDVVHWVWKDWDUHLQWKH FRQFOXVLRQRIFRQWUDFWVDVZHOODVWKRVHHVWDEOLVKLQJ FXVWRG\RIUHJXODWHGLQVWLWXWLRQV the formalities to which contracts must conform, are DSSOLFDEOHWRHOHFWURQLFWUDQVDFWLRQV 0LQLVWHULDO 'HFLVLRQ 1R  RQ WKH JRYHUQPHQW )RUPHUFDQWLOHDQGƄ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ƄOHPDQDJHPHQW LY VHFXULW\RIKXPDQUHVRXUFHV Y  DPHQGHGRQ$SULOUHFRJQL]HWKHOHJDOYDOLGLW\ SK\VLFDODQGHQYLURQPHQWDOVHFXULW\ YL PDQDJHPHQW RIHOHFWURQLFWUDQVDFWLRQVDQGHOHFWURQLFVLJQDWXUH RIFRPPXQLFDWLRQVDQGRSHUDWLRQV YLL DFFHVVFRQ WURO YLLL SURFXUHPHQWGHYHORSPHQWDQGPDLQWHQDQFH 7KH %DQNLQJ $FW JRYHUQV ƄQDQFLDO LQWHUPHGLDWLRQ RILQIRUPDWLRQV\VWHPV L[ PDQDJHPHQWRILQIRUPD DQGRWKHUEDQNLQJRSHUDWLRQVXQGHUWKHRYHUVLJKWRI WLRQ VHFXULW\ LQFLGHQWV [  PDQDJHPHQW RI EXVLQHVV WKH&HQWUDO5HVHUYH%DQNRI(O6DOYDGRUDQGWKH2I FRQWLQXLW\DQG [L FRPSOLDQFH ƄFHRIWKH6XSHULQWHQGHQWRIWKH)LQDQFLDO6\VWHP,W SURYLGHVWKDWLQWHUEDQNFUHGLWDQGGHELWWUDQVDFWLRQV J  3HQGLQJOHJLVODWLRQDQGFKDOOHQJHV PD\ EH FRQGXFWHG E\ HOHFWURQLF H[FKDQJH RI GDWD 6HYHUDO ELOOV UHODWLQJ WR GDWD SURWHFWLRQ KDYH EHHQ GLVFXVVHG E\ WKH 1DWLRQDO $VVHPEO\ ZLWK D YLHZ WR  7KH&LYLO&RGHKDVEHHQDPHQGHGWLPHV II. REPORT ON LEGISLATION IN THE LATIN AMERICAN COUNTRIES 35

,WDOVRUHFRJQL]HVWKHSUREDWLYHYDOLGLW\RIUHFRUGVRU EHLQJ VXEVHTXHQWO\ FRQWHVWHG WKH $FW HVWDEOLVKHV ORJVNHSWLQFRPSXWHUV\VWHPVDVZHOODVSULQWHGPD systems to certify the information transmitted, which WHULDO UHƅHFWLQJ WUDQVDFWLRQV PDGH E\ VXFK UHFRUGV DUHWREHRSHUDWHGE\FHUWLI\LQJHQWLWLHV7KH$FWHV FRQWDLQLQJGLJLWDOVLJQDWXUHVRUSHUVRQDOLGHQWLƄFDWLRQ WDEOLVKHVWKDWIRUWKHH[FKDQJHRIJHQHUDOLQIRUPDWLRQ QXPEHUV 3,1V  RI DXWKRUL]HG XVHUV RI WKH V\VWHPV each authorized user will have a pair of interconnected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p tiable transferable securities in an electronic record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ƄOHGYLDHOHFWURQLF FRPSOHWHDFFXUDWHWUXWKIXOFOHDUDQGWLPHO\UHJDUG FRPPXQLFDWLRQVQHWZRUNVVXFKDVWKH,QWHUQHW,WDOVR LQJ WKH FKDUDFWHULVWLFV RI SURGXFWV DQG VHUYLFHV LL  DXWKRUL]HVWKH7D[$GPLQLVWUDWLRQWRXVHPHGLDRILWV WRUHFHLYHLQIRUPDWLRQRQWKHULVNVRUVLGHHIIHFWVRI RZQWRDFFHVVWKHELOOLQJV\VWHPVRIƄQDQFLDORUVLPLODU SURGXFWV DV ZHOO DV RQ WKH WHUPV RI FRQWUDFWV LLL  LQVWLWXWLRQVDVZHOODVFUHGLWFDUGPDQDJHPHQWV\V WR EH SURWHFWHG IURP PLVOHDGLQJ RU IDOVH DGYHUWLV WHPV LQJ LY  WR EH HGXFDWHG DQG LQIRUPHG RQ FRQVXPHU 7KH &XVWRPV 6LPSOLƄFDWLRQ $FW LV DQ LPSRUWDQW DG LVVXHV Y  WR KDYH IUHH FKRLFH DQG HTXDO WUHDWPHQW vance for electronic transactions, since it incorporates YL WREHSURWHFWHGDJDLQVWWKHULVNRIUHFHLYLQJSURG PHDVXUHV FRQVLVWHQW ZLWK WKH 5HJXODWLRQV WR WKH XFWVRUVHUYLFHVWKDWHQGDQJHUOLIHKHDOWKRUSHUVRQDO 8QLƄHG &HQWUDO $PHULFDQ &XVWRPV &RGH DQG WKH LQWHJULW\ YLL  WR GHPDQG DQG UHFHLYH FRPSHQVDWLRQ &$)7$'5$JUHHPHQWDQGFRQWDLQVVRPHSURYLVLRQV IRUKLGGHQGHIHFWV YLLL WREHSURWHFWHGIURPDEXVLYH DOLJQHGZLWKWKH81&,75$/0RGHO/DZRQ(OHFWURQLF SUDFWLFHV DQG FODXVHV LQ FRQWUDFWV DQG L[  WR KDYH 6LJQDWXUHV,WDXWKRUL]HVWKHHOHFWURQLFWUDQVPLVVLRQRI DFFHVVWRDFRPSOHWHUHDGLQJDQGH[SODQDWLRQRIDOO GHFODUDWLRQVRIPHUFKDQGLVHFHUWLƄFDWHVRUFHUWLƄFD REOLJDWLRQVDQGFRQGLWLRQVVWLSXODWHGLQFRQWUDFWVDQG WLRQVRIRULJLQVKLSSLQJPDQLIHVWVELOOVRIODGLQJDQG DWWDFKPHQWV WKHUHWR ,Q -DQXDU\  WKH $FW ZDV RWKHU GRFXPHQWV QHHGHG WR FDUU\ RXW IRUHLJQ WUDGH DPHQGHGWRLQFOXGHWKHULJKWRIFRQVXPHUVWRRSWRXW WUDQVDFWLRQV ,W DOVR DXWKRUL]HV SD\PHQW RI FXVWRPV ZLWKRXWLQFXUULQJOLDELOLW\ZLWKLQHLJKWGD\VDIWHUVLJQLQJ GXW\ REOLJDWLRQV E\ HOHFWURQLF IXQGV WUDQVIHUV IURP the contract, in the case of contracts made remotely, WKHEDQNDFFRXQWVRIWKRVHGHFODULQJLWHPVFXVWRPV LQFOXGLQJWKURXJKHOHFWURQLFPHGLD DJHQWVRUWKLUGSDUWLHVWRWKHFKHFNLQJDFFRXQWRIWKH 2IƄ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ƄGHQWLDOLW\DQG 7KH1DWXUDO3HUVRQV1DPHV$FWRI0D\FRQ LQWHJULW\RIWKHLQIRUPDWLRQH[FKDQJHGLQV\VWHPVWKDW WDLQVDQXPEHURIPHDVXUHVSURWHFWLQJWKHKROGHURID interact with customs systems, and to prevent its QDPHDJDLQVWLWVLPSURSHUXVHDQGSXQLVKHVDQ\RQH 36 Study on the harmonization of cyberlegislation in Latin America

ZKRXVXUSVWKHQDPH7KH&RQVXPHU3URWHFWLRQ$FW RUWKHRYHUVLJKWIXQFWLRQVRIWKH2IƄFHRIWKH6XSHULQ LQFOXGHVPHDVXUHVIRUSURWHFWLQJFRQVXPHUVSURKLELW WHQGHQWRIWKH)LQDQFLDO6\VWHP LQJSURYLGHUVIURPVKDULQJSHUVRQDODQGFUHGLWUHODWHG information about a consumer, either to providers or ,QUHJDUGWRFXVWRPVWKH&XVWRPV6LPSOLƄFDWLRQ$FW WKURXJK HQWLWLHV VSHFLDOL]LQJ LQ SURYLGLQJ LQIRUPDWLRQ HVWDEOLVKHVWKHREOLJDWLRQWRPDLQWDLQWKHVHFUHF\DQG VHUYLFHV ZLWKRXW WKH DXWKRUL]DWLRQ RI WKH FRQVXPHU FRQƄGHQWLDOLW\RIWKHSHUVRQDODQGQRUPDWLYHLQIRUPD ,W OD\V GRZQ REOLJDWLRQV IRU SURYLGHUV RI LQIRUPDWLRQ WLRQ RI WKRVH H[HFXWLQJ GLJLWDO VLJQDWXUHV WKDW KDYH VHUYLFHVUHTXLULQJWKHPWRJLYHFRQVXPHUVDFFHVVWR EHHQ GLJLWDOO\ FHUWLƄHG 6XFK LQIRUPDWLRQ PD\ LQ QR LQIRUPDWLRQRQWKHLURZQGDWDDQGWRUHTXHVWWKDWVXFK FDVH EH FURVVUHIHUHQFHG SURƄOHG RU XVHG IRU SXU GDWDEHXSGDWHGPRGLƄHGRUUHPRYHGIUHHRIFKDUJH SRVHVRWKHUWKDQWKRVHSURYLGHGIRULQWKH$FWH[FHSW 6XFKHQWLWLHVKDYHWKHREOLJDWLRQWRFRUUHFWIDOVHRXW LIWKHGDWDVXEMHFWDJUHHVH[SUHVVO\LQZULWLQJWRLWVXVH dated or inaccurate information within no more than IRUDGLIIHUHQWSXUSRVH ten days from the date on which they receive a re G  ,QGXVWULDODQGLQWHOOHFWXDOSURSHUW\ TXHVWIURPWKHSDUW\FRQFHUQHG $VUHJDUGVLQWHOOHFWXDOSURSHUW\WKH&RQVWLWXWLRQDX $VFRQFHUQVƄQDQFLDOPDWWHUVWKH%DQNLQJ$FWSUR WKRUL]HVWKHJUDQWLQJRISULYLOHJHVIRUDOLPLWHGWLPHWR YLGHV WKDW LQIRUPDWLRQ RQ GHSRVLWV DQG VDYLQJV discoverers, inventors and improvers of productive UHFHLYHGE\EDQNVVKDOOEHFRQƄGHQWLDODQGWKDWLQ SURFHVVHV7KH,QWHOOHFWXDO3URSHUW\$FWRI$XJXVW formation on such transactions may be disclosed only PRVWUHFHQWO\DPHQGHGRQ$SULOJUDQWV WRWKHDFFRXQWKROGHUVFRQFHUQHGWKHLUOHJDOUHSUH FRS\ULJKW SURWHFWLRQ WR DUWLVWLF DQG OLWHUDU\ ZRUNV VHQWDWLYHVRUWKH'LUHFWRUDWHRI,QWHUQDO5HYHQXHZKHQ LQFOXGLQJ FRPSXWHU SURJUDPV DQG FRPSLODWLRQV D VRUHTXLUHGIRURYHUVLJKWSXUSRVHV7KH$FWSURYLGHV FDWHJRU\WKDWLQFOXGHVFRPSXWHUGDWDEDVHV7KH$FW WKDWEDQNLQJFRQƄGHQWLDOLW\VKDOOQRWEHXVHGWRRE deems any permanent or temporary electronic stor VWUXFW FULPLQDO LQYHVWLJDWLRQV RYHUVLJKW DFWLYLWLHV DJHRIDZRUNWREHDUHSURGXFWLRQ$VFRQFHUQVWKH GHWHUPLQDWLRQRIWD[HVRUFROOHFWLRQRIWD[REOLJDWLRQV UHODWHGULJKWVRIDUWLVWVSHUIRUPHUVSURGXFHUVRISKR RUWRSUHYHQWJDUQLVKPHQWRIDVVHWV7KH%DQNLQJ$FW QRJUDPVDQGEURDGFDVWHUVLWGHƄQHVWKHFRQFHSWVRI VWLSXODWHVWKDWWKH2IƄFHRIWKH6XSHULQWHQGHQWRIWKH SKRQRJUDPDQGYLGHRJUDPDQGUHFRJQL]HVWKHULJKW )LQDQFLDO 6\VWHP VKDOO PDLQWDLQ D FUHGLW LQIRUPDWLRQ RISXEOLFFRPPXQLFDWLRQE\DQ\PHGLXP service to maintain information on users of institutions 7KH7UDGHPDUNVDQG2WKHU'LVWLQJXLVKLQJ0DUNV$FW LQ WKH ƄQDQFLDO V\VWHP LQ RUGHU WR IDFLOLWDWH DVVHVV RI  -XO\  PRVW UHFHQWO\ DPHQGHG RQ  $SULO PHQWE\WKHLQVWLWXWLRQVRIWKHULVNVLQYROYHGLQWKHLU UHFRJQL]HVWKDWDFWVRIXQIDLUFRPSHWLWLRQLH RSHUDWLRQV those carried out as part of mercantile activity or for 7KH5HJXODWLRQRI&UHGLW5HSRUWLQJ6HUYLFHV$FWRI purposes connected therewith, that are contrary to -XO\PRVWUHFHQWO\DPHQGHGRQ$SULO KRQHVW FRPPHUFLDO XVDJH DQG SUDFWLFH DUH WR EH JRYHUQV WKH KDQGOLQJ RI GDWD RQ FRQVXPHUVp DQG FRQVLGHUHGDVVXFKHYHQLIFDUULHGRXWWKURXJKHOHF FOLHQWVp FUHGLW UHFRUGV 7KH SXUSRVH RI WKH $FW LV WR WURQLFFRPPXQLFDWLRQRUHFRPPHUFHPHGLD7KH$FW JXDUDQWHHWKHULJKWWRKRQRXUSHUVRQDODQGIDPLO\SUL SHUPLWV WKH XVH RI HOHFWURQLF PHGLD WR UHJLVWHU GLV YDF\DQGSHUVRQDOLPDJHE\HQVXULQJWKDWLQIRUPDWLRQ WLQJXLVKLQJ PDUNV 7KLV SURYLVLRQ LV FRQVLVWHQW ZLWK RQFRQVXPHUVRUFOLHQWVWKDWLVLQFOXGHGRUOLNHO\WREH WKH$FWRQ8QLIRUP3URFHGXUHVIRUWKH3UHVHQWDWLRQ included in a data service administered by a duly ac 3URFHVVLQJ DQG 5HJLVWUDWLRQ RU 'HSRVLW RI ,QVWUX FUHGLWHGOHJDOHQWLW\LVUHOLDEOHWUXWKIXODQGXSWRGDWH PHQWVLQWKH5HJLVWULHVRI5HDO(VWDWHDQG0RUWJDJHV DQGWKDWLWLVSURSHUO\KDQGOHG7KH$FWDOVRUHJXODWHV &RPPHUFLDOO\2ZQHG5HDO(VWDWH&RPPHUFHDQG,Q WKH DFWLYLWLHV RI OHJDO HQWLWLHV LQ WKH SXEOLF RU SULYDWH WHOOHFWXDO3URSHUW\ZKLFKSURYLGHVIRUWKHXVHRIID[ sector that are authorized to operate as data services DQGHPDLODGGUHVVHVLQUHTXHVWVIRUWKHUHFRUGLQJRI DQGHFRQRPLFDJHQWVWKDWPDLQWDLQRUKDQGOHGDWDRQ LQVWUXPHQWVLQUHJLVWULHVIRUSXUSRVHVRIQRWLƄFDWLRQWR WKHFUHGLWUHFRUGVRIFRQVXPHUVRUFOLHQWV UHTXHVWHUVE\UHJLVWU\SHUVRQQHO $V UHJDUGV LQWHUQDWLRQDO FRPPLWPHQWV (O 6DOYDGRU 7KH (OHFWURQLF %RRN(QWU\ 6HFXULWLHV $FW SURYLGHV KDVUDWLƄHGWKHIROORZLQJLQVWUXPHQWV that deposits of securities received by depositories PXVWEHWUHDWHGDVFRQƄGHQWLDODQGWKDWLQIRUPDWLRQ • :,32 &RS\ULJKW 7UHDW\ DQG :,32 3HUIRUPDQFHV RQVXFKWUDQVDFWLRQVPXVWRQO\EHJLYHQWRDFFRXQW DQG3KRQRJUDPV7UHDW\ KROGHUVRUWKHLUOHJLWLPDWHUHSUHVHQWDWLYHV,WSURYLGHV • %HLMLQJ7UHDW\RQ$XGLRYLVXDO3HUIRUPDQFHV WKDWFRQƄGHQWLDOLW\VKDOOQRWEHXVHGWRREVWUXFWFULPL QDOLQYHVWLJDWLRQVRUWRSUHYHQWJDUQLVKPHQWRIDVVHWV • 8QLYHUVDO&RS\ULJKW&RQYHQWLRQ II. REPORT ON LEGISLATION IN THE LATIN AMERICAN COUNTRIES 37

• %UXVVHOV&RQYHQWLRQ5HODWLQJWRWKH'LVWULEXWLRQRI RIQDWLRQDOLQWHUQDWLRQDORUIRUHLJQHQWLWLHV,WSURYLGHV 3URJUDPPH&DUU\LQJ6LJQDOV7UDQVPLWWHGE\6DW WKHVDPHVDQFWLRQVIRUFUHDWLQJGLVWULEXWLQJPDUNHW ellite LQJRUSRVVHVVLQJSURJUDPVFDSDEOHRISURGXFLQJWKH DERYHPHQWLRQHGHIIHFWV • &HQWUDO$PHULFDQ$JUHHPHQWIRUWKH3URWHFWLRQRI ,QGXVWULDO3URSHUW\ 7KH 6SHFLDO $FW WR 6DQFWLRQ &XVWRPV 9LRODWLRQV RI • 'RPLQLFDQ5HSXEOLF&HQWUDO$PHULFD8QLWHG6WDWHV 2FWREHUPRVWUHFHQWO\DPHQGHGRQ$SULO )UHH7UDGH$JUHHPHQW &$)7$'5 LQDUWLFOHGHƄQHVWKHIROORZLQJF\EHUFULPHV ZKLFKFDUU\SULVRQVHQWHQFHVRIWR\HDUV L DF • $JUHHPHQWRQ7UDGH5HODWHG$VSHFWVRI,QWHOOHF FHVVLQJ E\ DQ\ XQDXWKRUL]HG PHDQV WKH FRPSXWHU WXDO3URSHUW\5LJKWV 75,36 DGPLQLVWHUHGE\:72 V\VWHPV XVHG E\ WKH &XVWRPV 6HUYLFH LL  WDNLQJ H  'RPDLQQDPHV FRQWURO RI FRS\LQJ GHVWUR\LQJ UHQGHULQJ XQXVDEOH DOWHULQJIDFLOLWDWLQJWKHWUDQVIHURIRUSRVVHVVLQJDQ\ 7KH7UDGHPDUNVDQG2WKHU'LVWLQJXLVKLQJ0DUNV$FW FRPSXWHU SURJUDP GHVLJQHG E\ RU IRU WKH &XVWRPV HVWDEOLVKHV WKH UHTXLUHPHQWV DQG WHUPV IRU WKH SUR Service or its databases, that the Customs Service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ÐQ691HW PXVWKDYH GHVLJQHGIRUWKHRSHUDWLRQVRIWKH&XVWRPV6HUYLFH LQSODFHGLVSXWHUHVROXWLRQSURFHGXUHVEDVHGRQWKH LQRUGHUWRREVWUXFWWKHLUIXQFWLRQLQJRUREWDLQEHQHƄWV SULQFLSOHVRIWKH8QLIRUP'RPDLQ1DPH'LVSXWH5HV IRUKLPRUKHUVHOIRUIRUWKLUGSDUWLHV LY IDFLOLWDWLQJWKH ROXWLRQ3ROLF\DQGPXVWSURYLGHSXEOLFRQOLQHDFFHVV XVHRIDXVHUQDPHDQGSDVVZRUGDVVLJQHGWRHQWHU to a reliable and accurate database with contact in WKH FRPSXWHU V\VWHPV ZLWK SURYLVLRQ IRU VHQWHQFHV IRUPDWLRQIRUWKRVHUHJLVWHULQJGRPDLQQDPHVZKLOH RIWR\HDUVLIWKHDFWLYLW\LVIDFLOLWDWHGEHFDXVHRI REVHUYLQJWKHOHJDOSURYLVLRQVUHODWLQJWRWKHSURWHF QHJOLJHQFH  DQG Y  PDQLSXODWLQJ WKH FRPSXWHU RU WLRQRIWKHLUSULYDF\ communications systems in order to obstruct any FRQWUROIXQFWLRQSURYLGHGIRULQWKHV\VWHP ,QWKLVUHJDUGWKH$VRFLDFLÐ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Ð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ƅHFW DOWHU DQG GLJLWDO VLJQDWXUHV 7KH /HJLVODWLYH $VVHPEO\ LV GDPDJH UHQGHU XQXVDEOH RU GHVWUR\ GDWD LQIRUPD FRQVLGHULQJDSURSRVDOIRUQHZOHJLVODWLRQWREHHQWL WLRQHOHFWURQLFGRFXPHQWVGDWDPHGLDSURJUDPVRU WOHG6SHFLDO$FWDJDLQVW&\EHUFULPH information and communication or telematics systems associated with public, social, administrative, emer $PRQJWKHPDLQFKDOOHQJHVIDFLQJWKHFRXQWU\LVWKH JHQF\RUQDWLRQDOVHFXULW\V\VWHPVDVZHOODVWKRVH QHHGIRUDJHQHUDOODZRQGDWDSURWHFWLRQWKDWZRXOG 38 Study on the harmonization of cyberlegislation in Latin America

EHLQOLQHZLWKWKH'LUHFWLYHVIRU+DUPRQL]DWLRQRI'DWD QDWXUHVDQGVLJQDWXUHVWKDWDUHHOHFWURQLFGLJLWL]HGRU 3URWHFWLRQ LQ WKH ,EHUR$PHULFDQ &RPPXQLW\ LVVXHG SULQWHGE\DQ\HOHFWURQLFPHDQVDYDLODEOHWRWKH5HJ E\ WKH ,EHUR$PHULFDQ 'DWD 3URWHFWLRQ 1HWZRUN (O LVWUDURIWKH*HQHUDO3URSHUW\5HJLVWU\ZLWKUHVSHFWWR Salvador also needs to set up a national computer se WKHLWHPVUHFRUGHGLQWKHHOHFWURQLFUHFRUGV FXULW\LQFLGHQWUHVSRQVHWHDP 7KH&RPPHUFLDO&RGHRI-DQXDU\UHTXLUHV GUATEMALA that documentation and information related to mer FDQWLOHDFWLYLWLHVEHSUHVHUYHGIRUƄYH\HDUVDQGWKDW 7KH (OHFWURQLF &RPPXQLFDWLRQV DQG 6LJQDWXUH 5HF FHUWDLQ W\SHV RI DFWV EH UHFRUGHG LQ WKH 0HUFDQWLOH RJQLWLRQ $FW RI  6HSWHPEHU  LV WKH PDLQ 5HJLVWU\RUUHODWHGERRNVRUV\VWHPV,QWKHƄQDQFLDO OHJLVODWLRQJRYHUQLQJHFRPPHUFH,WPD\DOVREHDS DUHD WKH 2UJDQLF $FW RI WKH %DQN RI *XDWHPDOD RI SOLHGKRZHYHUWRVRPHDVSHFWVRIHFRPPHUFHLQWKH 0D\DXWKRUL]HVWKH%DQNRI*XDWHPDODWR FLYLOPHUFDQWLOHƄ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Ƅ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ƄFD PDWWHUV DULVLQJ IURP DQ\ FRPPHUFLDO UHODWLRQVKLS WLRQVHYDOXDWLRQFULWHULDTXHVWLRQVDQGDQVZHUVDOLVW whether contractual or not, that is based on the use of RIELGGHUVUHSRUWVRQƄQDODZDUGVDQGSURFXUHPHQW HOHFWURQLFFRPPXQLFDWLRQVRUVLPLODUPHGLD7KH$FW FRQWUDFWV ,W DOVR DXWKRUL]HV HOHFWURQLF QRWLƄFDWLRQV LQFRUSRUDWHV VHYHUDO SUHFHSWV IURP WKH 81&,75$/ WKURXJK WKH *XDWHFRPSUDV V\VWHP DQG DOORZV IRU model laws on electronic commerce and on electronic FKDQJHVLQWKHWHUPVIRUSULFHTXRWDWLRQVWREHSXE VLJQDWXUHV,WDOVRHVWDEOLVKHVWKHOHJDOUHTXLUHPHQWV OLVKHGWKURXJKWKHV\VWHP that must be met by electronic communications and the elements that must be present in the formation 7KHUHJXODWLRQVWRWKH6WDWH3URFXUHPHQW$FWGHƄQH DQGFRQFOXVLRQRIFRQWUDFWVE\HOHFWURQLFPHDQV WKH SRZHUV RI WKH 'LUHFWRUDWH IRU 2YHUVLJKW RI 6WDWH 7KH $FW DOVR GHƄQHV WKH UHTXLUHPHQWV WKDW PXVW EH &RQWUDFWVDQG3URFXUHPHQWDQG0LQLVWHULDO'HFLVLRQ PHWE\HOHFWURQLFVLJQDWXUHVDQGGLJLWDOFHUWLƄFDWHVDV GHDOVZLWKWKH0DQDJHPHQW/LQNDJH6\VWHP ZHOODVWKHIXQFWLRQVRIFHUWLƄFDWLRQVHUYLFHSURYLGHUV WKH ,QWHJUDWHG $FFRXQWLQJ 6\VWHP DQG WKH *XDWH WKDWDUHVXSHUYLVHGE\WKH0LQLVWU\RIWKH(FRQRP\,W FRPSUDVV\VWHP,QDGGLWLRQ'HFLVLRQRIWKH DOVRUHFRJQL]HVWKHIXQFWLRQDOHTXLYDOHQF\RISULQWHG 'LUHFWRUDWHIRU2YHUVLJKWRI6WDWH&RQWUDFWVDQG3UR GRFXPHQWV ZLWK KDQGZULWWHQ VLJQDWXUHV DQG HOHF FXUHPHQWRIƄFLDOO\UHFRJQL]HVWKHZHEDGGUHVVRIWKH WURQLFGRFXPHQWVZLWKDGYDQFHGHOHFWURQLFVLJQDWXUHV 6WDWH&RQWUDFWLQJDQG3URFXUHPHQW,QIRUPDWLRQ6\V EDFNHG E\ D GLJLWDO FHUWLƄFDWH ,W LQFOXGHV SURYLVLRQV WHP ZZZJXDWHFRPSUDVJW  DQG VSHFLƄHV DPRQJ JRYHUQLQJVSHFLƄFWRSLFVVXFKDVWUDQVSRUWRIPHU RWKHUWKLQJVZKDWW\SHVRIXVHUVPD\DFFHVVWKHV\V chandise and measures to protect consumers in WHP DQG KRZ WKH 'LUHFWRUDWH IRU 2YHUVLJKW RI 6WDWH RQOLQHWUDQVDFWLRQV &RQWUDFWVDQG3URFXUHPHQWLVWRPDQDJHDFFHVVWR WKHV\VWHPpVDFFRXQWV 7KH &LYLO &RGH RI  6HSWHPEHU  HVWDEOLVKHV SULQFLSOHV JRYHUQLQJ VWDQGDUGIRUP FRQWUDFWV DQG 2QWD[PDWWHUVWKH7D[&RGHRI$SULOHP UHFRJQL]HVWKHIXQFWLRQDOHTXLYDOHQFHRISK\VLFDOVLJ SRZHUVWKH7D[$GPLQLVWUDWLRQWR L VHWXSSURFHGXUHV II. REPORT ON LEGISLATION IN THE LATIN AMERICAN COUNTRIES 39

IRUSURFHVVLQJWUDQVPLWWLQJDQGSUHVHUYLQJLQYRLFHV was done remotely, especially by telephone or at the ERRNVUHFRUGVDQGGRFXPHQWVE\HOHFWURQLFPHDQV GRPLFLOHRIWKHFRQVXPHURUXVHU1RQHRIWKHVHODZV DQG LL  UHTXLUH WD[SD\HUV WR SD\ WD[HV HOHFWURQLFDOO\ provide special treatment for online transactions with ,WDOVRDOORZVWD[SD\HUVWRPHHWWKHLUWD[REOLJDWLRQV UHVSHFWWRWUDGLWLRQDORQHV E\XVLQJHOHFWURQLFIRUPVDQGWRVXEPLWE\HOHFWURQLF F  3URWHFWLRQRISHUVRQDOGDWD PHDQVWKHLUWD[UHWXUQV LQFOXGLQJDIƄGDYLWV ƄQDQFLDO VWDWHPHQWVDQGWKHDQQH[HVWKHUHWRRUDQ\LQIRUPD 7KH &RQVWLWXWLRQ RI *XDWHPDOD SURWHFWV SULYDF\ E\ WLRQWKH\DUHUHTXLUHGE\ODZWRVXSSO\SURYLGHGWKH\ HQVKULQLQJ DV D IXQGDPHQWDO ULJKW WKH LQYLRODELOLW\ RI DUHLGHQWLƄHGZLWKDFRQƄGHQWLDOHOHFWURQLFSDVVZRUG private correspondence and of telephone, radio, ca ZKLFK LV HTXLYDOHQW WR D KDQGZULWWHQ VLJQDWXUH WKDW ble and other communications by means of modern WKH\HQVXUHWKHLQWHJULW\RIWKHLQIRUPDWLRQVXEPLWWHG WHFKQRORJ\,WDOVRSURYLGHVWKDWHYHU\RQHKDVWKHULJKW RU WKDW WKH 7D[$GPLQLVWUDWLRQ SURYLGHV WKHP ZLWK D WREHDZDUHRIDQ\LQIRUPDWLRQFRQFHUQLQJWKHPWKDW SK\VLFDORUHOHFWURQLFQRWLFHRIUHFHLSW LVNHSWLQDUFKLYHVƄOHVRUDQ\RWKHUW\SHRIVWDWHUH cord, and the purpose of such information, as well as 8QGHUWKH7D[&RGHERWKWKH9DOXH$GGHG7D[$FW WRFRUUHFWUHFWLI\DQGXSGDWHVXFKLQIRUPDWLRQ,QDG DQG WKH ,QFRPH 7D[$FW DORQJ ZLWK WKH UHJXODWLRQV GLWLRQWKH7D[&RGHSURWHFWVWKHFRQƄGHQWLDOLW\RIWD[ thereto, allow the use of electronic means for interac LQIRUPDWLRQ WLRQEHWZHHQWD[SD\HUVDQGWKHWD[DXWKRULWLHVDQGIRU WD[SD\HUVWRIXOƄOWKHLUWD[REOLJDWLRQV ,QWKHƄQDQFLDOVSKHUH'HFUHH1RDGRSWLQJ WKH%DQNVDQG)LQDQFLDO*URXSV$FWRI0D\ )LQDOO\ZLWKUHJDUGWRFXVWRPV*XDWHPDODFRQVLGHUV JRYHUQV EDQN VHFUHF\ DQG SURYLGHV WKDW H[FHSW LQ WKH8QLƄHG&HQWUDO$PHULFDQ&XVWRPV&RGHDQGLWV WKHFDVHRIREOLJDWLRQVDQGGXWLHVHVWDEOLVKHGLQWKH 5HJXODWLRQV DV ZHOO DV WKH &$)7$'5 $JUHHPHQW OHJLVODWLRQRQODXQGHULQJRIPRQH\RURWKHUDVVHWVGL DSSOLFDEOHWRLWVIRUHLJQWUDGHRSHUDWLRQV UHFWRUVPDQDJHUVOHJDOUHSUHVHQWDWLYHVRIƄ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ƄOHVUHFRUGV tional mandate to protect the interests of consumers, or any other type of public record, and the purpose WKH&RQJUHVVRIWKH5HSXEOLFLVVXHGLWV'HFUHH1R for which the information is collected, as well as to DGRSWLQJWKH&RQVXPHUDQG8VHU3URWHFWLRQ SURWHFW FRUUHFW UHFWLI\ RU XSGDWH WKH LQIRUPDWLRQ $FWRI0DUFK 7KRVHZKRJDWKHUWKHLQIRUPDWLRQPD\QRWGLVVHPL QDWHGLVWULEXWHRUPDUNHWWKHSHUVRQDOGDWDFRQWDLQHG 7KH 3URPRWLRQ RI &RPSHWLWLRQ DQG (IIHFWLYH &RQ in the information systems developed as part of their VXPHU3URWHFWLRQ$FWLQFRUSRUDWHVWKHEDVLFSULQFLSOHV GXWLHVH[FHSWZLWKWKHH[SUHVVZULWWHQFRQVHQWRIWKH RIFRQVXPHUUHODWLRQVVHWIRUWKLQ8QLWHG1DWLRQV*HQ LQGLYLGXDOVWRZKRPWKHLQIRUPDWLRQUHIHUV/LNHZLVH HUDO $VVHPEO\ UHVROXWLRQ  RQ JXLGHOLQHV IRU sensitive information or sensitive personal information FRQVXPHU SURWHFWLRQ 7KH $FW VWDWHV WKDW WKH ULJKWV PD\QRWEHVROGWKURXJKDQ\PHGLXP DQGJXDUDQWHHVLWSURYLGHVIRUDUHLQDOLHQDEOHDQGDUH LQWKHSXEOLFLQWHUHVW G  ,QGXVWULDODQGLQWHOOHFWXDOSURSHUW\

,WDOVRUHFRJQL]HVDPRQJRWKHUVWKHIROORZLQJULJKWV &RS\ULJKWDQGSDWHQWULJKWVDUHHQVKULQHGLQWKH&RQ L WKHULJKWRIFRQVXPHUVWRVDIHW\ LL WKHULJKWWRLQ VWLWXWLRQ7KH&RS\ULJKWDQG5HODWHG5LJKWV$FWRI IRUPDWLRQ LLL IUHHGRPWRFRQFOXGHFRQWUDFWV LY WKH 0D\PRVWUHFHQWO\DPHQGHGRQ6HSWHPEHU ULJKWWRUHSDUDWLRQFRPSHQVDWLRQUHLPEXUVHPHQWRU SURWHFWVWKHULJKWVRIDXWKRUVRIDUWLVWLFVFLHQ H[FKDQJH RI WKH JRRGV LQ FDVH RI QRQFRPSOLDQFH WLƄFDQGOLWHUDU\ZRUNVLQFOXGLQJFRPSXWHUSURJUDPV Y WKHULJKWRIFRQVXPHUVWREHHGXFDWHGDQG YL WKH DQGGDWDEDVHV,WDOVRUHFRJQL]HVWKDWDQ\SHUPDQHQW ULJKW WR RSW RXW ZLWKRXW LQFXUULQJ OLDELOLW\ ZLWKLQ ƄYH RU WHPSRUDU\ VWRUDJH RI D ZRUN LQ DQ\ W\SH RI VXS GD\VIURPWKHGDWHRIVLJQLQJWKHFRQWUDFWRUIURPWKH SRUWLQJ PDWHULDO IRUPDW RU PHGLXP LV FRQVLGHUHG D date on which the contract was concluded when this UHSURGXFWLRQ$VUHJDUGVUHODWHGULJKWVRIDUWLVWVSHU 40 Study on the harmonization of cyberlegislation in Latin America

IRUPHUVDQGUDGLREURDGFDVWHUVWKH$FWGHƄQHVWKH FRXQWU\pV8QLYHUVLGDG GHO 9DOOH LV WKH HQWLW\ UHVSRQ FRQFHSWVRISKRQRJUDPVDQGYLGHRJUDPVDQGUHFRJ VLEOH IRU LVVXLQJ DQG XSGDWLQJ SROLFLHV IRU RSHUDWLRQ QL]HVWKHULJKWWRFRPPXQLFDWHZLWKWKHSXEOLFE\DQ\ RI WKH FRXQWU\p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munication, broadcast or distribution of a protected REOLJDWLRQWRWKH6WDWHRUKLGLQJIDOVLI\LQJRUDOWHULQJ OLWHUDU\ RU DUWLVWLF ZRUN ZLWKRXW WKH DXWKRUL]DWLRQ WKHDFFRXQWLQJVWDWHPHQWVRUƄQDQFLDOVWDWXVRIDQLQ RI WKH FRS\ULJKW KROGHU LLL  SXEOLF SHUIRUPDQFH RU GLYLGXDORUOHJDOHQWLW\DQG YL GLVWULEXWLQJGHVWUXFWLYH WUDQVPLVVLRQ RI D SURWHFWHG SKRQRJUDP ZLWKRXW WKH FRPSXWHUSURJUDPV DXWKRUL]DWLRQRILWVSURGXFHUDQG LY UHSURGXFWLRQRU $VUHJDUGVLQIRUPDWLRQVHFXULW\*XDWHPDODKDVDQD rental of copies of protected literary, artistic or scien tional computer security incident response team which WLƄFZRUNVZLWKRXWWKHDXWKRUL]DWLRQRIWKHFRS\ULJKW ZDVVHWXSZLWKRXWJRLQJWKURXJKOHJDOIRUPDOLWLHV,WLV KROGHU Y GLVFORVXUHRILQGXVWULDOVHFUHWVDQG YL XVH FRQVLGHUHGDGYLVDEOHKRZHYHUWRSDVVOHJLVODWLRQRU RIUHJLVWHUHGWUDGHPDUNVRULPLWDWLRQVWKHUHRIDPRQJ UHJXODWLRQVWRHQGRZLWZLWKDXWKRULW\DQGUHVRXUFHV RWKHUV J  3HQGLQJOHJLVODWLRQDQGFKDOOHQJHV 2QWKHLQWHUQDWLRQDOIURQW*XDWHPDODKDVUDWLƄHGWKH IROORZLQJLQVWUXPHQWV 2QHRIWKHPDLQFKDOOHQJHVIDFHGE\*XDWHPDODLVWKH QHHGWRXSGDWHLWVFULPLQDOOHJLVODWLRQERWKVXEVWDQ :,32 &RS\ULJKW 7UHDW\ DQG :,32 3HUIRUPDQFHV • WLYHDQGSURFHGXUDOLQRUGHUWRVWUHQJWKHQLWVDELOLW\ DQG3KRQRJUDPV7UHDW\ WR FRPEDW F\EHUFULPH *XDWHPDOD LV DOVR SUHSDULQJ • %HLMLQJ7UHDW\RQ$XGLRYLVXDO3HUIRUPDQFHV  UHJXODWRU\DQGOHJDOFKDQJHVWKDWZRXOGDOORZIRUWKH • 'RPLQLFDQ 5HSXEOLF&HQWUDO $PHULFD8QLWHG creation and operation of the national computer secu 6WDWHV)UHH7UDGH$JUHHPHQW &$)7$'5 ULW\LQFLGHQWUHVSRQVHWHDPZLWKLQWKH0LQLVWU\RIWKH • /LVERQ $JUHHPHQW IRU WKH 3URWHFWLRQ RI $SSHOOD ,QWHULRU,QDGGLWLRQWKHUHJXODWRU\IUDPHZRUNRQSUR WLRQVRI2ULJLQDQGWKHLU,QWHUQDWLRQDO5HJLVWUDWLRQ WHFWLRQRIGDWDPXVWEHXSGDWHGWREULQJLWLQOLQHZLWK WKH FRPPLWPHQWV XQGHUWDNHQ E\ *XDWHPDOD LQ WKH 3DULV &RQYHQWLRQ IRU WKH 3URWHFWLRQ RI ,QGXVWULDO • ,EHUR$PHULFDQ'DWD3URWHFWLRQ1HWZRUN 3URSHUW\  • %HUQH &RQYHQWLRQ IRU WKH 3URWHFWLRQ RI /LWHUDU\ HAITI DQG$UWLVWLF:RUNV • &RQYHQWLRQ IRU WKH 3URWHFWLRQ RI 3URGXFHUV RI +DLWLKDVQROHJLVODWLRQRQHFRPPHUFHKRZHYHUWKH 3KRQRJUDPV$JDLQVW8QDXWKRUL]HG'XSOLFDWLRQRI SDUOLDPHQW LV FRQVLGHULQJ D ELOO RQ WKH PDWWHU DQG LV 7KHLU3KRQRJUDPV *HQHYD&RQYHQWLRQ LQWKHSURFHVVRIGLVFXVVLQJDGLJLWDODJHQGDWKDWLQ • ,QWHUQDWLRQDO&RQYHQWLRQIRUWKH3URWHFWLRQRI3HU FOXGHVVWUDWHJLHVIRUSURPRWLQJHFRPPHUFH IRUPHUV 3URGXFHUV RI 3KRQRJUDPV DQG %URDG D  (OHFWURQLFWUDQVDFWLRQVHOHFWURQLFVLJQDWXUHV FDVWLQJRUJDQL]DWLRQV 5RPH&RQYHQWLRQ +DLWL GRHV QRW FXUUHQWO\ KDYH D ODZ RQ HOHFWURQLF • :,323DWHQW&RRSHUDWLRQ7UHDW\ WUDQVDFWLRQVRURQHOHFWURQLFVLJQDWXUHV7KLVLVDQLP • $JUHHPHQWRQ7UDGH5HODWHG$VSHFWVRI,QWHOOHFWX portant area of opportunity that should be borne in DO3URSHUW\5LJKWV 75,36 DGPLQLVWHUHGE\:72 PLQGLQFRQQHFWLRQZLWKWKHSURMHFWRQ+DUPRQL]DWLRQ H  'RPDLQQDPHV RI,&73ROLFLHV/HJLVODWLRQDQG5HJXODWRU\3URFHGXUHV LQWKH&DULEEHDQ +,3&$5  7KH'RPDLQ1DPH'LVSXWH5HVROXWLRQ&HQWUHIRUWKH WRSOHYHOGRPDLQQDPHJW*XDWHPDODKRXVHGDWWKH E  &RQVXPHUSURWHFWLRQ II. REPORT ON LEGISLATION IN THE LATIN AMERICAN COUNTRIES 41

+DLWLKDVQROHJLVODWLRQRQFRQVXPHUSURWHFWLRQKRZ H  'RPDLQQDPHV HYHUDELOORQWKHVXEMHFWLQWURGXFHGLQLVXQGHU UHYLHZLQWKHOHJLVODWXUH 7KH6XVWDLQDEOH'HYHORSPHQW1HWZRUNRI+DLWLLVUH VSRQVLEOH IRU PDQDJLQJ WKH WRSOHYHO GRPDLQ QDPH F  3URWHFWLRQRISHUVRQDOGDWD KW $V UHJDUGV WKH UHVROXWLRQ RI GRPDLQQDPH GLV 7KH&RQVWLWXWLRQRIWKH5HSXEOLFRI+DLWLRI0DUFK SXWHVWKH1HWZRUNKDVQRW\HWSXEOLVKHGDSROLF\LQ HQVKULQHVDVIXQGDPHQWDOULJKWVWKHULJKWWRSUL NHHSLQJZLWKWKH,&$118QLIRUP'RPDLQ1DPH'LV YDF\DQGWRDSULYDWHOLIH7KHUHLVVWLOOQRVSHFLƄ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ƄF WKURXJK WKH FRXQWU\pV SDUWLFLSDWLRQ LQ WKH +,3&$5 DQGDUWLVWLFZRUNVZKLFKSURWHFWVWKHPRUDODQGPD SURMHFW RQ LVVXHV RI HFRPPHUFH WUDQVDFWLRQV  H WHULDO ULJKWV RI DXWKRUV LQ UHVSHFW RI OLWHUDU\ PXVLFDO FRPPHUFH HYLGHQFH SULYDF\DQGSURWHFWLRQRIGDWD DQG DUWLVWLF ZRUNV DV ZHOO DV FLQHPDWRJUDSKLF DQG interception of communications, cybercrime and ac SKRWRJUDSKLFZRUNV7KH'HFUHHGRHVQRWH[SUHVVO\ FHVVWRSXEOLFLQIRUPDWLRQ IUHHGRPRILQIRUPDWLRQ  FRYHUDOOUHODWHGULJKWV ULJKWVRISURGXFHUVRISKRQR JUDPVRURIEURDGFDVWLQJRUJDQL]DWLRQVIRUH[DPSOH  6RPHRIWKHPDLQFKDOOHQJHVIDFHGE\+DLWLDUHWKH QRU GRHV LW FRYHU FRPSXWHU SURJUDPV RU GDWDEDVHV ODFNRIFRQQHFWLYLW\DQGRI,&7FDSDFLWLHV ZKLFKDUHSURWHFWHGDVOLWHUDU\ZRUNVXQGHUWKH75,36 $JUHHPHQW HONDURAS 7KH'HFUHHJUDQWVFRS\ULJKWKROGHUVH[FOXVLYHULJKWV to publish, reproduce, perform, adapt, disseminate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ƄVFDWLRQRIIRUJHGFRSLHVDQGWKHFUHDWRURI $FWLVVXHGE\'HFUHH1RRI'HFHPEHU WKHIRUJHU\PD\EHUHTXLUHGWRSD\FRPSHQVDWLRQIRU DQGWKH$FWRQ(IƄFLHQWDQG7UDQVSDUHQW3UR GDPDJHVWRWKHULJKWKROGHU FXUHPHQW WKURXJK (OHFWURQLF 0HDQV LVVXHG WKURXJK 'HFUHH1RRI$XJXVWZKLFKJRY 2QWKHLQWHUQDWLRQDOOHYHO+DLWLKDVVLJQHGWKHIROORZ HUQVWKHSXEOLFVHFWRU7KH&LYLO&RGHRI)HEUXDU\ LQJLQVWUXPHQWV DVDPHQGHGLQDOVRFRYHUVWKHFRQFOX • 3DULV &RQYHQWLRQ IRU WKH 3URWHFWLRQ RI ,QGXVWULDO VLRQIRUPDOL]DWLRQYDOLGLW\DQGHIƄFDF\RIFRQWUDFWV 3URSHUW\ D  (OHFWURQLFWUDQVDFWLRQVHOHFWURQLFVLJQDWXUHV • %HUQH &RQYHQWLRQ IRU WKH 3URWHFWLRQ RI /LWHUDU\ DQG$UWLVWLF:RUNV 7KH*RYHUQPHQWRI+RQGXUDVKDVVLJQHGWKH8QLWHG 1DWLRQV &RQYHQWLRQ RQ WKH 8VH RI (OHFWURQLF &RP • ,QWHU$PHULFDQ &RQYHQWLRQ RQ WKH 5LJKWV RI WKH PXQLFDWLRQV LQ ,QWHUQDWLRQDO &RQWUDFWV ZKLFK ZDV $XWKRULQ/LWHUDU\6FLHQWLƄFDQG$UWLVWLF:RUNV LQFRUSRUDWHGLQWRWKHGRPHVWLFOHJLVODWLRQE\'HFUHH • :,323DWHQW&RRSHUDWLRQ7UHDW\ 1R7KH(OHFWURQLF6LJQDWXUHV$FWLQFOXGHV WKHSURYLVLRQVRIWKH81&,75$/0RGHO/DZRQ(OHF • %HLMLQJ7UHDW\RQ$XGLRYLVXDO3HUIRUPDQFHV WURQLF6LJQDWXUHVUHFRJQL]LQJDQGUHJXODWLQJWKHXVHRI +DLWLKDVDOVRDGRSWHGWKH$JUHHPHQWRQ7UDGH5H VXFKVLJQDWXUHVIRUGDWDPHVVDJHVDQGJUDQWLQJWKHP ODWHG$VSHFWVRI,QWHOOHFWXDO3URSHUW\5LJKWV 75,36  WKHVDPHYDOLGLW\DQGOHJDOHIIHFWDVKDQGZULWWHQVLJ DGPLQLVWHUHGE\:72 QDWXUHVH[SUHVVLQJWKHZLOORIVLJQDWRULHV 42 Study on the harmonization of cyberlegislation in Latin America

7KH$FWPDNHVDGLVWLQFWLRQEHWZHHQHOHFWURQLFVLJ LQJWKURXJKPHFKDQLVPVIRUHOHFWURQLFFHUWLƄFDWLRQRI QDWXUHV DQG DGYDQFHG HOHFWURQLF VLJQDWXUHV ZKLFK OHJDOLQVWUXPHQWVFRQWUDFWVRUULJKWVGRFXPHQWHGLQ WKHUHIRUHKDYHGLIIHUHQWOHJDOHIIHFWVDQGUHFRJQL]HV SXEOLF ƄOHV ZLWK WKH VDPH OHJDO IRUFH DQG SUREDWLYH WKHIXQFWLRQDOHTXLYDOHQF\EHWZHHQSULQWHGGRFXPHQWV YDOXHDVGRFXPHQWVRISXEOLFUHFRUG DQGGRFXPHQWVFRQWDLQHGLQGDWDPHVVDJHVDVZHOO DVEHWZHHQKDQGZULWWHQVLJQDWXUHVDQGGLJLWDOVLJQD 7KH 7D[&RGH RI  0D\  LQFOXGHV D QXPEHU WXUHVWKDWKDYHEHHQFHUWLƄHGE\DQDFFUHGLWHGVHUYLFH RI PHDVXUHV GHVLJQHG WR IDFLOLWDWH RQOLQH WUDQVDF SURYLGHU6WDWHDXWKRULWLHVLQWKHGLIIHUHQWEUDQFKHVRI WLRQV LQFOXGLQJ E\ FRQƄUPLQJ WD[SD\HU DFWLRQV 7KH JRYHUQPHQWDUHHPSRZHUHGWRFDUU\RXWDGPLQLVWUD 5HJXODWLRQVRQWKH6\VWHPIRU,VVXLQJDQG*HQHUDW WLYHSURFHGXUHVWKURXJKHOHFWURQLFPHDQVDQGWRXVH LQJ(OHFWURQLF7D[UHODWHG'RFXPHQWVRI2FWREHU HOHFWURQLFƄOHVDQGGLJLWDOVLJQDWXUHVLQWKHLUDFWLRQV JRYHUQSURFHGXUHVUHTXLUHPHQWVWHUPVRIXVH HLWKHUDPRQJWKHPVHOYHVRUZLWKSULYDWHSDUWLHV DQGREOLJDWLRQVRIWD[SD\HUVXVLQJVRIWZDUHWRLVVXHRU JHQHUDWHWD[UHODWHGGRFXPHQWVZKLFKPXVWEHGXO\ 7KH&RPPHUFLDO&RGHRI0D\SHUPLWVPHUFKDQWV DXWKRUL]HGE\WKH([HFXWLYH'LUHFWRUDWHRI5HYHQXHV WR FRQGXFW WKHLU DFFRXQWLQJ YLD HOHFWURQLF V\VWHPV LQUHVSHFWRIGLIIHUHQWW\SHVRIWD[UHODWHGGRFXPHQWV LQFOXGLQJDFFRXQWLQJUHFRUGVDQGVSHFLDOERRNVDQG 7KH *HQHUDO &XVWRPV $FW RI  'HFHPEHU  records, documents, invoices, sent and received mail, does not mention the use of electronic media for cus EDFNJURXQGLQIRUPDWLRQUHODWHGWRWD[REOLJDWLRQVDQG toms clearance and related procedures, but does ZKHUH UHOHYDQW SURJUDPV VXESURJUDPV DQG RWKHU UHFRJQL]H WKH DSSOLFDELOLW\ RI LQWHUQDWLRQDO WUHDWLHV UHFRUGV SURFHVVHG WKURXJK HOHFWURQLF RU FRPSXWHU HJWKH8QLƄHG&HQWUDO$PHULFDQ&XVWRPV&RGHDQG V\VWHPV LWV5HJXODWLRQVZKLFKGRFRYHUHOHFWURQLFPHGLD:LWK 7KH $FW RQ WKH )LQDQFLDO 6\VWHP RI  6HSWHPEHU WKH$FWRQ,PSOHPHQWDWLRQRIWKH&$)7$'5$JUHH  DOORZV LQVWLWXWLRQV LQ WKH V\VWHP WR RIIHU DQG PHQW +RQGXUDV LQFRUSRUDWHG WKH SURYLVLRQV RI WKDW SURYLGHƄQDQFLDOSURGXFWVDQGVHUYLFHVYLDHOHFWURQLF $JUHHPHQWLQWRLWVGRPHVWLFOHJLVODWLRQ PHGLDDQGUHFRJQL]HVWKHOHJDOIRUFHRIHOHFWURQLFVLJ E  &RQVXPHUSURWHFWLRQ natures, which have the same validity on electronic GRFXPHQWVDVZULWWHQVLJQDWXUHVRQSDSHUGRFXPHQWV 7KH&RQVWLWXWLRQRIWKH5HSXEOLFRI+RQGXUDVRI SURYLGHGWKDWWKHHOHFWURQLFVLJQDWXUHLVEDFNHGE\D -DQXDU\  PRVW UHFHQWO\ DPHQGHG RQ  0D\ UHFRJQL]HGFHUWLƄ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ƄFLHQW DQG 7UDQVSDUHQW 3UR RHXUO[ZHKQGKWP  FXUHPHQWWKURXJK(OHFWURQLF0HDQVLVVXHGE\'HFUHH 1R  RI  $XJXVW  3URFXUHPHQW $FW  7KH$FWUHJXODWHVqVDOHVE\PDLODQGWKHOLNHrLQFOXG H[SDQGVWKHUDQJHRISXEOLFSXUFKDVHVRIJRRGVRU LQJLQWKHODWWHUFDWHJRU\RIIHUVRIJRRGVDQGVHUYLFHV services to include purchases made by electronic made via postal mail, telecommunications and elec FDWDORJXHZKLFKLQFOXGHIUDPHZRUNDJUHHPHQWVMRLQW WURQLF PHGLD DQG DFFHSWHG E\ WKRVH VDPH PHGLD purchases and reverse auctions carried out by cen 2QOLQH WUDQVDFWLRQV DUH VXEMHFW WR WKH UXOHV UHJDUG WUDOL]HGDQGGHFHQWUDOL]HGSXEOLFDJHQFLHV LQJFRQVXPHUVpULJKWWRFOHDULQIRUPDWLRQtLQ6SDQLVK DQG ZLWK OHJLEOH FKDUDFWHUV t WKDW LV WUXWKIXO FRP 7KH 3URSHUW\ $FW RI  -XQH  ZKLFK JRYHUQV SOHWHDQGWLPHO\ LQFOXGLQJLQIRUPDWLRQRQSULFHVDQG acts related to chattels, real estate, commercial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transactions and administrative procedures, includ $PRQJ RWKHU WKLQJV WKH $FW GHVFULEHV SURWHFWLYH II. REPORT ON LEGISLATION IN THE LATIN AMERICAN COUNTRIES 43

PHDVXUHVWKDWFRQVXPHUVFDQWDNHWKURXJKFRQVXPHU 2Q WKH LQWHUQDWLRQDO IURQW +RQGXUDV KDV UDWLƄHG WKH associations, and arbitration procedures and mecha IROORZLQJLQVWUXPHQWV QLVPVIRUFRQWUROOLQJDEXVLYHFODXVHV+RZHYHURQOLQH • 3DULV &RQYHQWLRQ IRU WKH 3URWHFWLRQ RI ,QGXVWULDO FRQVXPHUVDUHQRWLQFOXGHG 3URSHUW\ F  3URWHFWLRQRISHUVRQDOGDWD • ,QWHUQDWLRQDO&RQYHQWLRQIRUWKH3URWHFWLRQRI3HU IRUPHUV 3URGXFHUV RI 3KRQRJUDPV DQG %URDG 7KH &RQVWLWXWLRQ RI WKH 5HSXEOLF RI +RQGXUDV HQ FDVWLQJ2UJDQL]DWLRQV 5RPH&RQYHQWLRQ VKULQHVWKHULJKWWRKRQRXUSHUVRQDODQGIDPLO\SULYDF\ DQGSHUVRQDOLPDJHDQGWKHLQYLRODELOLW\DQGSULYDF\ • &RQYHQWLRQIRUWKH3URWHFWLRQRI3URGXFHUVRI3KR RIFRPPXQLFDWLRQVDQGLWSURYLGHVIRUKDEHDVGDWD QRJUDPV 7KH3XEOLF,QIRUPDWLRQ7UDQVSDUHQF\DQG$FFHVV$FW • %HUQH &RQYHQWLRQ IRU WKH 3URWHFWLRQ RI /LWHUDU\ establishes mechanisms to ensure the protection, DQG$UWLVWLF:RUNV FODVVLƄFDWLRQ DQG VHFXULW\ RI SXEOLF LQIRUPDWLRQ DQG • :,323DWHQW&RRSHUDWLRQ7UHDW\ respect for restrictions on access to reserved informa • :,32 &RS\ULJKW 7UHDW\ DQG :,32 3HUIRUPDQFHV WLRQ FRQƄGHQWLDO LQIRUPDWLRQ SURYLGHG E\ LQGLYLGXDOV DQG3KRQRJUDPV7UHDW\ DQGFRQƄGHQWLDOSHUVRQDOGDWD • %HLMLQJ7UHDW\RQ$XGLRYLVXDO3HUIRUPDQFHV  7KH $FW DOVR JRYHUQV WKH KDQGOLQJ RI SHUVRQDO GDWD • $JUHHPHQWRQ7UDGH5HODWHG$VSHFWVRI,QWHOOHF DQGPDNHVDGLVWLQFWLRQEHWZHHQSHUVRQDOGDWDDQG WXDO3URSHUW\5LJKWV 75,36 DGPLQLVWHUHGE\:72 FRQƄGHQWLDO SHUVRQDO LQIRUPDWLRQ ,W UHJXODWHV WKH JXDUDQWHH RI KDEHDV GDWD DQG SURKLELWV FRPSHOOLQJ • &HQWUDO$PHULFDQ$JUHHPHQWIRUWKH3URWHFWLRQRI anyone to provide personal data that could cause ,QGXVWULDO3URSHUW\DQG GLVFULPLQDWLRQRUMHRSDUGL]HWKHSHUVRQLQPDWHULDORU •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correct or update it or to remove false information or KDV DGRSWHG WKH SULQFLSOHV RI WKH ,&$11 8QLIRUP FRQƄGHQWLDOSHUVRQDOGDWDFRQWDLQHGLQDQ\Ƅ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electronic documents of another contained in net DVDULJKWRIRZQHUVKLSWKHDXWKRULW\WRDFFHVVRUJUDQW ZRUNVPHGLDRUFRPSXWHUV\VWHPV,WDOVRSURYLGHV public access to computer databases via telecommu SHQDOWLHVIRUGDPDJLQJPHGLDRUFKDQQHOVRIFRPPX QLFDWLRQVPHGLD QLFDWLRQ 7KH ,QGXVWULDO 3URSHUW\ $FW LVVXHG E\ 'HFUHH ,WDOVRVDQFWLRQVWKHGHVWUXFWLRQFRQFHDOPHQWRUIRU 1RSURYLGHVWKDWFRPSXWHUSURJUDPVFRQVLG JHU\ RI DFFRXQWLQJ UHFRUGV FRPSDQ\ ERRNV OHJDO ered in isolation are not inventions, and therefore are GRFXPHQWVFHUWLƄFDWLRQVDIƄGDYLWVSHUVRQDOLGHQWLW\ QRWSDWHQWDEOH GDWDUHFRUGVƄQDQFLDOVWDWHPHQWVGRFXPHQWVVWRUHG 44 Study on the harmonization of cyberlegislation in Latin America

LQ PDJQHWLF RU HOHFWURQLF IRUP RU RI RWKHU LQIRUPD IRUWKHGLJLWDOHFRQRP\FOHDUO\VLJQDOOLQJWKH)HGHUDO WLRQRIDQLQGLYLGXDORUOHJDOHQWLW\LQRUGHUWRREWDLQ *RYHUQPHQWpVFRPPLWPHQWWRSURPRWHHFRPPHUFH PDLQWDLQRUH[WHQGDFDSLWDORUFUHGLWIDFLOLW\RIDVX pervised institution, or in order to cover up, distort or 0H[LFRKDVQRVSHFLƄFHFRPPHUFHOHJLVODWLRQUDWKHU maliciously modify credit or debit transactions, direct D QXPEHU RI FLYLO PHUFDQWLOH DGPLQLVWUDWLYH DQG WD[ RUFRQWLQJHQWREOLJDWLRQVLOOLTXLGLW\LQVROYHQF\RURWKHU laws have been amended to provide for the use of IDFWVWKDWPXVWEHUHFRUGHGLQDFFRXQWLQJUHFRUGVRU GDWD PHVVDJHV DQG HOHFWURQLF PHDQV t VSHFLƄFDOO\ RWKHUUHFRUGV HOHFWURQLF VLJQDWXUH DGYDQFHG HOHFWURQLF VLJQDWXUH DQG GLJLWDO FHUWLƄFDWLRQ IXUQLVKHG E\ JRYHUQPHQWDO 7KH$FWSURYLGHVSULVRQVHQWHQFHVIRULOOHJDOO\DFFHVV RU SULYDWHVHFWRU SURYLGHUV RI WKHVH VHUYLFHV t DQG LQJGDWDSURFHVVLQJV\VWHPVRIVXSHUYLVHGLQVWLWXWLRQV WRUHFRJQL]HWKHLUOHJDOYDOLGLW\LQFRQWUDFWVPDGHE\ IRU WKH SXUSRVH RI DOWHULQJ GHOHWLQJ GDPDJLQJ RU FRPSDQLHVFRQVXPHUVRUJRYHUQPHQWHQWLWLHV WDNLQJ UHFRUGV ƄOHV RU RWKHU LQIRUPDWLRQ RI VXFK LQ VWLWXWLRQVRUWKHLUFOLHQWVIRUEHQHƄWRIVHOIRUDQRWKHU D  (OHFWURQLFWUDQVDFWLRQVHOHFWURQLFVLJQDWXUHV 7KHVDPHVHQWHQFHVDSSO\IRUXVLQJDQ\SURFHGXUHWR DFFHVVRULPSURSHUO\XVHDQLQVWLWXWLRQpVGDWDEDVHVWR ,QWKHDUHDRIFLYLOODZWKH)HGHUDO&LYLO&RGHRI0H[ steal money by electronic transfer from one account LFR DOORZV SDUWLHV WR H[SUHVV WKHLU ZLOO UHPRWHO\ DQG WRDQRWKHUDFFRXQWLQWKHVDPHRUDQRWKHULQVWLWXWLRQ PDNHV KDQGZULWWHQ DQG HOHFWURQLF VLJQDWXUHV IXQF WLRQDOO\HTXLYDOHQW0RUHRYHUWKH)HGHUDO&RGHRI&LYLO 2QVHFXULW\RILQIRUPDWLRQWKH3URSHUW\$FWUHTXLUHV 3URFHGXUHDOORZVGDWDPHVVDJHVWREHSUHVHQWHGDV WKHSK\VLFDOPHGLXPRIRIƄFLDOLQVWUXPHQWVFRQWUDFWV HYLGHQFHDQGVHWVUXOHVIRUHVWDEOLVKLQJWKHLUHYLGHQWLDO RU GRFXPHQWV DXWKRUL]HG RU FHUWLƄHG E\ D QRWDU\ WR YDOXH LQFOXGHIUDXGSUHYHQWLRQPHDVXUHVDQGWRSHUPLWYHUL ƄFDWLRQ RI WKH SDUWLHVp VWDWHPHQWV LQ IRUPV VXFK DV ,QWKHPHUFDQWLOHDUHDWKH&RPPHUFLDO&RGHLQFOXGHV HQFU\SWHG EDUFRGHV ƄQJHUSULQW LGHQWLƄFDWLRQ RI SDU DVSHFLDOFKDSWHURQHFRPPHUFHLQFRUSRUDWLQJPXFK WLHV DSSHDULQJ DQG RWKHU PHDQV PDGH SRVVLEOH E\ RIWKHFRQWHQWRIWKH81&,75$/PRGHOODZVRQHOHF WHFKQRORJLFDOGHYHORSPHQWV7KH$FWHVWDEOLVKHVƄQHV WURQLFFRPPHUFHDQGRQHOHFWURQLFVLJQDWXUHVDQGLW IRU L DOWHULQJWKHFRQWHQWRIFHUWLƄFDWLRQHQWULHVUHFRUG UHJXODWHVDPRQJRWKHUPDWWHUVHOHFWURQLFVLJQDWXUHV HQWULHVDQGUHJLVWULHV LL IDLOLQJWRFRPSO\ZLWKVHFX DGYDQFHGHOHFWURQLFVLJQDWXUHVFHUWLƄFDWLRQVHUYLFHV ULW\VWDQGDUGVIRUGLJLWDOƄOHVDQGPHGLD LLL DFFHVVLQJ DQG WKH DGPLVVLELOLW\ RI GDWD PHVVDJHV DV HYLGHQFH HOHFWURQLFƄOHVRUGDWDEDVHVZLWKRXWDXWKRUL]DWLRQ LY  DW WULDO 7KH UHJXODWLRQV WR WKH &RPPHUFLDO &RGH RQ WDNLQJRUFRS\LQJFRPSXWHUDSSOLFDWLRQVDQGWHFKQRO FHUWLƄFDWLRQ VHUYLFH SURYLGHUV JHQHUDO UXOHV DQG WKH RJLHVZLWKRXWDXWKRUL]DWLRQDQG Y LQVWDOOLQJVRIWZDUH DJUHHPHQW DPHQGLQJ WKHP JR LQWR JUHDWHU GHWDLO RQ ZLWKRXWDXWKRUL]DWLRQ WHFKQLFDO DGPLQLVWUDWLYH DQG OHJDO UHTXLUHPHQWV IRU WKHLURSHUDWLRQLQRUGHUWRVWUHQJWKHQWKHOHJDOIUDPH J  3HQGLQJOHJLVODWLRQDQGFKDOOHQJHV ZRUNJRYHUQLQJSURYLGHUVRIFHUWLƄFDWLRQVHUYLFHV +RQGXUDV QHHGV WR DGRSW WKH SURSRVHG OHJLVODWLRQ 6WHSV KDYH DOVR EHHQ WDNHQ WR LPSOHPHQW ODZV HQYLVDJHGLQWKH'LJLWDO$JHQGDIRU+RQGXUDV DQG UHJXODWLRQV RQ WKH 3XEOLF 5HJLVWU\ RI &RP LQFOXGLQJWKHHFRPPHUFHELOORI$XJXVWDQG PHUFH WKURXJK HOHFWURQLF PHDQV LQFOXGLQJ LQWHU DOLD WKHSUHOLPLQDU\ELOORQDGRSWLRQRIWKH&RXQFLORI(X PHDVXUHV JRYHUQLQJ WKH 6LQJOH 5HJLVWU\ RI &KDWWHO URSHpV&RQYHQWLRQRQ&\EHUFULPH7KHUHJXODWLRQVWR 0RUWJDJHV ZKLFK RSHUDWHV RQ WKH ZHEVLWH KWWS WKH(OHFWURQLF6LJQDWXUHV$FWQHHGWREHGUDIWHGWKH ZZZUXJJREP[ZKLFKHQDEOHVƄQDQFLDOLQVWLWXWLRQV &RQVXPHU 3URWHFWLRQ $FW QHHGV WR EH H[SDQGHG WR or creditors to record documentation whereby liens, SURWHFWRQOLQHFRQVXPHUV$QDWLRQDOFRPSXWHUHPHU VSHFLDOSULYLOHJHVRUUHWHQWLRQULJKWVRQFKDWWHOVDUHVHW JHQF\ UHVSRQVH WHDP RU FRPSXWHU VHFXULW\ LQFLGHQW XSWUDQVPLWWHGPRGLƄHGRUFDQFHOOHG UHVSRQVHWHDPLVDOVRQHHGHG 7KH&UHGLW,QVWLWXWLRQV$FWDOORZVƄ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

,Q WKH DUHD RI SXEOLF DGPLQLVWUDWLRQ WKH )HGHUDO QXPEHURIVHFWRUDOODZVVXFKDVWKH)HGHUDO$FWRQ $GPLQLVWUDWLYH 3URFHGXUHV $FW WKH 3URFXUHPHQW 7UDQVSDUHQF\DQG$FFHVVWR3XEOLF*RYHUQPHQW,QIRU /HDVLQJDQG3XEOLF6HFWRU6HUYLFHV$FWDQGWKH3XE PDWLRQWKH&UHGLW,QVWLWXWLRQV$FWDQGWKH)HGHUDO$FW OLF:RUNVDQG5HODWHG6HUYLFHV$FWDOOSURYLGHIRUWKH RQ&RQVXPHU3URWHFWLRQLQFOXGHPHDVXUHVSURWHFWLQJ use of electronic media for interaction with the fed individuals from false or inaccurate personal informa HUDO*RYHUQPHQWWKURXJKV\VWHPVWKDWXVHDGYDQFHG WLRQ HOHFWURQLF VLJQDWXUHV EDFNHG E\ GLJLWDO FHUWLƄFDWHV 7KH UHJLPH IRU SURWHFWLRQ RI SHUVRQDO GDWD ZDV ERWKLQDGPLQLVWUDWLYHSURFHGXUHVDQGLQJRYHUQPHQW FRPSOHWHG ZLWK WKH DGRSWLRQ RI WKH )HGHUDO $FW RQ FRQWUDFWV 3URWHFWLRQRI3HUVRQDO'DWDLQWKH3RVVHVVLRQRI,Q 7KH $GYDQFHG (OHFWURQLF 6LJQDWXUHV $FW DQG WKH GLYLGXDOVDQGWKH5HJXODWLRQVWKHUHWR7KXVWKHUHLV UHJXODWLRQV WKHUHWR UHLQIRUFH WKH OHJDO IUDPHZRUN IRU QRZDJHQHUDOODZRQWKHKDQGOLQJRISHUVRQDOGDWD RQOLQH FRPPXQLFDWLRQV XVLQJ GLJLWDO VLJQDWXUHV DQG E\LQGLYLGXDOVRUOHJDOHQWLWLHVLQWKHSULYDWHVHFWRUZKR FHUWLƄFDWHVEHWZHHQSXEOLFHQWLWLHVDWWKHWKUHHOHYHOV collect and process personal data, independently of RIJRYHUQPHQWLHIHGHUDOVWDWHDQGPXQLFLSDO WKHVHFWRURULQGXVWU\LQYROYHG7KLVSURYLGHVDSUR tection system that is consistent with international 7KH IHGHUDO H[HFXWLYH EUDQFK KDV LVVXHG D GHFLVLRQ VWDQGDUGV LQ SDUWLFXODU WKH (XURSHDQ PRGHO WKH DLPHG DW LVVXLQJ SROLFLHV DQG SURYLVLRQV IRU WKH 1D $3(&3ULYDF\)UDPHZRUNEHDULQJLQPLQGWKHWHUPV WLRQDO'LJLWDO6WUDWHJ\UHODWLQJWR,&7VDQGVHFXULW\RI RIWKH1RUWK$PHULFDQ)UHH7UDGH$JUHHPHQW LQIRUPDWLRQ7KHLGHDLVDOVRWRGUDZXSWKHJHQHUDO administrative manual on these matters, so as to en ,Q -DQXDU\  0H[LFR EHFDPH WKH VHFRQG FRXUDJHWKHXVHRIFORXGVROXWLRQVE\IHGHUDODJHQFLHV HFRQRP\WRMRLQWKH$3(&&URVVERUGHU3ULYDF\(Q and promote practices that will ensure information se IRUFHPHQW $UUDQJHPHQW 7KH $UUDQJHPHQW RSHUDWHV FXULW\ XQGHUWKH)HGHUDO$FWRQ3URWHFWLRQRI3HUVRQDO'DWD WKH UHJXODWLRQV WKHUHWR DQG WKH QHZ SDUDPHWHUV IRU ,Q WKH DUHD RI WD[ ODZ WKH )HGHUDO 7D[ &RGH WKH VHOIUHJXODWLRQLQWKHDUHDRISHUVRQDOGDWDSXEOLVKHG &XVWRPV $FW DQG WKH 6RFLDO 6HFXULW\ $FW DOORZ WD[ LQWKH2IƄFLDO*D]HWWHRI0D\ authorities to use electronic means in a variety of pro FHGXUHVSURFHVVHVDQGGRFXPHQWV LQFOXGLQJGLJLWDO G  ,QGXVWULDODQGLQWHOOHFWXDOSURSHUW\ WD[UHFHLSWV 7KHVHODZVUHFRJQL]HKDQGZULWWHQDQG ,QWKHDUHDRILQWHOOHFWXDOSURSHUW\ULJKWV0H[LFRKDV HOHFWURQLFVLJQDWXUHVDVIXQFWLRQDOO\HTXLYDOHQWDQGVHW LQFOXGHG LQ WKH )HGHUDO &RS\ULJKW $FW SURWHFWLRQ IRU IRUWKUXOHVJRYHUQLQJWKHXVHRIDGYDQFHGHOHFWURQLF FRPSXWHUSURJUDPVDVZHOODVWKHULJKWWRH[FOXVLYH VLJQDWXUHV EDFNHG E\ GLJLWDO FHUWLƄFDWHV 7KH SURYL XVH RI QHZV KHDGOLQHV RQ WKH ,QWHUQHW 7KH )HGHUDO VLRQVRIWKHVHODZVDUHGHVFULEHGLQJUHDWHUGHWDLOLQ &ULPLQDO&RGHGHƄQHVDQXPEHURIRIIHQFHVUHODWHGWR DGPLQLVWUDWLYHUHJXODWLRQVLVVXHGE\WKHIHGHUDOH[HFX XQDXWKRUL]HGUHSURGXFWLRQDQGODUJHVFDOHPDUNHWLQJ WLYHEUDQFK RIZRUNVSURWHFWHGE\FRS\ULJKWZLWKRXWWKHSHUPLV E  &RQVXPHUSURWHFWLRQ VLRQRIWKHKROGHURIWKHFRS\ULJKW 7KH)HGHUDO&RQVXPHU3URWHFWLRQ$FWLQFOXGHVDVSH ,Q DGGLWLRQ 0H[LFR KDV VLJQHG WKH IROORZLQJ LQVWUX FLDO FKDSWHU ZLWK UXOHV JRYHUQLQJ FRQVXPHUVp ULJKWV PHQWV ZKHQ H[HFXWLQJ WUDQVDFWLRQV HOHFWURQLFDOO\ ,W UHFRJ • %HLMLQJ7UHDW\RQ$XGLRYLVXDO3HUIRUPDQFHV  QL]HVHWKLFVFRGHVDVYDOLGVHOIUHJXODWRU\PHFKDQLVPV • :,32 &RS\ULJKW 7UHDW\ DQG :,32 3HUIRUPDQFHV that can serve as a basis for seal of trust systems con DQG3KRQRJUDPV7UHDW\ sistent with international best practices, such as the VHDORIWUXVWRIWKH0H[LFDQ,QWHUQHW$VVRFLDWLRQ7KLV • %HUQH &RQYHQWLRQ IRU WKH 3URWHFWLRQ RI /LWHUDU\ V\VWHPLVSDUWRIWKH$VLD3DFLƄF7UXVWPDUN$OOLDQFH DQG$UWLVWLF:RUNV WKDWRSHUDWHVLQWKH$VLD3DFLƄFUHJLRQDQGLVFRQVLVW • &RQYHQWLRQ IRU WKH 3URWHFWLRQ RI 3URGXFHUV RI HQWZLWKWKH$3(&3ULYDF\)UDPHZRUN 3KRQRJUDPV$JDLQVW8QDXWKRUL]HG'XSOLFDWLRQRI 7KHLU3KRQRJUDPV *HQHYD&RQYHQWLRQ 7KH VHDO RI WUXVW LV DOVR GHVLJQHG WR VHUYH DV DQ HIƄFLHQWWRROIRUHQIRUFLQJREOLJDWLRQVLQUHJDUGWRSUR • ,QWHUQDWLRQDO&RQYHQWLRQIRUWKH3URWHFWLRQRI3HU WHFWLRQRISHUVRQDOLQIRUPDWLRQ IRUPHUV 3URGXFHUV RI 3KRQRJUDPV DQG %URDG FDVWLQJ2UJDQL]DWLRQV 5RPH&RQYHQWLRQ F  3URWHFWLRQRISHUVRQDOGDWD • %UXVVHOV&RQYHQWLRQUHODWLQJWRWKH'LVWULEXWLRQRI $UWLFOH  RI WKH &RQVWLWXWLRQ UHFRJQL]HV WKH SURWHF 3URJUDPPH&DUU\LQJ6LJQDOV7UDQVPLWWHGE\6DW WLRQ RI SHUVRQDO GDWD DV D IXQGDPHQWDO ULJKW DQG D ellite 46 Study on the harmonization of cyberlegislation in Latin America

• $JUHHPHQWRQ7UDGH5HODWHG$VSHFWVRI,QWHOOHF J  3HQGLQJOHJLVODWLRQDQGFKDOOHQJHV WXDO3URSHUW\5LJKWV 75,36 DGPLQLVWHUHGE\:72 7KH &RQJUHVV RI WKH 8QLRQ LV FXUUHQWO\ FRQVLGHULQJ H  'RPDLQQDPHV D QXPEHU RI SURSRVHG DPHQGPHQWV WR WKH )HGHUDO &ULPLQDO&RGHDQGWKH1DWLRQDO&RGHRI&ULPLQDO3UR ,QUHJDUGWRGRPDLQQDPHV1,&0H[LFRKDVDGRSWHG FHGXUHZLWKDYLHZWRDGRSWLQJWKHVXEVWDQWLYHDQG WKHDUELWUDWLRQSURFHVVHQYLVDJHGLQWKH,&$118QL SURFHGXUDOPHDVXUHVHQYLVDJHGLQWKH&RXQFLORI(X IRUP'RPDLQ1DPH'LVSXWH5HVROXWLRQ3ROLF\DVSDUW URSHpV &RQYHQWLRQ RQ &\EHUFULPH DQG KDUPRQL]LQJ RILWVRZQGLVSXWHUHVROXWLRQSROLF\DQGLWUHFRJQL]HV WKH UHOHYDQW IHGHUDO DQG VWDWH OHJLVODWLRQV 7KH &RQ WKH:,32$UELWUDWLRQDQG0HGLDWLRQ&HQWUHDVDSUR JUHVV LV DOVR GLVFXVVLQJ D JHQHUDO ELOO RQ SURWHFWLRQ YLGHURIDUELWUDWLRQVHUYLFHV RISHUVRQDOGDWDEHDULQJLQPLQGWKHDPHQGPHQWWR I  &\EHUFULPHDQGLQIRUPDWLRQVHFXULW\ DUWLFOHRIWKH&RQVWLWXWLRQRI)HEUXDU\ 7KHPDLQFKDOOHQJHVIDFLQJ0H[LFRKDYHWRGRZLWKWKH 7KH )HGHUDO &ULPLQDO &RGH GHƄQHV RIIHQFHV UHODWHG deployment of connectivity infrastructure and the crea WR WKH LQWHUFHSWLRQ RI FRPPXQLFDWLRQV JDLQLQJ LOOLFLW DFFHVVWRFRPSXWHUV\VWHPVDQGFDXVLQJKDUPWR,7 WLRQ RI FDSDFLWLHV WR LPSURYH XQGHUVWDQGLQJ DQG XVH V\VWHPV 7KH &UHGLW ,QVWLWXWLRQV $FW GHƄQHV D QXP RIWKHOHJDODVSHFWVRI,&7VWRSURPRWHHFRPPHUFH EHU RI RIIHQFHV LQYROYLQJ IUDXG HPSOR\LQJ HOHFWURQLF PHDQV NICARAGUA

7KH )HGHUDO 7HOHFRPPXQLFDWLRQV DQG %URDGFDVWLQJ 7KH1DWLRQDO+XPDQ'HYHORSPHQW3ODQLV $FWH[SDQGVWKHSRZHUVRIODZHQIRUFHPHQWDQGVH DLPHGDPRQJRWKHUWKLQJVDWVWUHQJWKHQLQJHFRP FXULW\DXWKRULWLHVE\HVWDEOLVKLQJFHUWDLQREOLJDWLRQVIRU PHUFH ZKLOH WKH 0LQLVWU\ RI 'HYHORSPHQW ,QGXVWU\ providers of telecommunications services, whether DQG7UDGHSURPRWHVWKHXVHRIHOHFWURQLFVLJQDWXUHV they be concessionaires, licensees or providers of ap WKURXJKLWV3URJUDPPHRQ6WUHQJWKHQLQJ6HFXULW\DQG plications and content services, to enable authorities &RQƄGHQFHLQWKH8VHRIH&RPPHUFHLQ1LFDUDJXD WR JDLQ DFFHVV LQ UHDO WLPH WR LQIRUPDWLRQ UHJDUGLQJ $PRQJ WKH PDLQ ODZV IRU HQDEOLQJ HFRPPHUFH DUH communications, users and devices in connection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ƄFLHQWQDWLRQDOFR 6LJQDWXUHVDQGUHFRJQL]HVWKHHIƄFDF\DQGOHJDOYDOLG operation system can be put underway that will unify LW\RIHOHFWURQLFVLJQDWXUHVDQGGLJLWDOFHUWLƄFDWHVDV WKH GLIIHUHQW ORFDO V\VWHPV $W WKH IHGHUDO OHYHO WKH ZHOO DV LQWHOOLJLEOH VRIWZDUH LQGHSHQGHQWO\ RI UHODWHG &RGHZLOOHQWHULQWRIRUFHRQ-XQH1RWLPH KDUGZDUH DWWULEXWDEOH WR LQGLYLGXDOV RU OHJDO HQWLWLHV frame has yet been set for the process at the state LQWKHSXEOLFRUSULYDWHVHFWRUDQGUHJXODWHVFHUWLƄFD level, but it is hoped that the Code will eliminate the WLRQ VHUYLFHV SURYLGHUV 7KH $FW PDNHV D GLVWLQFWLRQ H[LVWLQJSURFHGXUDOFRQWUDGLFWLRQVEHWZHHQWKHIHGHUDO EHWZHHQHOHFWURQLFVLJQDWXUHVDQGFHUWLƄHGHOHFWURQLF DQGWKHVWDWHV\VWHPV VLJQDWXUHV ZKLFK KDYH GLIIHUHQW OHJDO HIIHFWV DQG 0H[LFR LV D PHPEHU RI WKH &RQIHUHQFH RI 0LQLVWHUV UHFRJQL]HVWKHIXQFWLRQDOHTXLYDOHQF\RISULQWHGGRFX RI -XVWLFH RI WKH ,EHUR$PHULFDQ &RXQWULHV DQG KDV ments with respect to documents contained in data VLJQHG WKH ,EHUR$PHULFDQ &RRSHUDWLRQ $JUHHPHQW PHVVDJHVDQGRIKDQGZULWWHQVLJQDWXUHVZLWKUHVSHFW RQ 5HVHDUFK 8QGHUZULWLQJ DQG 2EWDLQLQJ (YLGHQFH WRFHUWLƄHGHOHFWURQLFVLJQDWXUHVEDFNHGE\DFHUWLƄ on Cybercrime, as well as the recommendation of the FDWHLVVXHGE\DQDFFUHGLWHGVHUYLFHSURYLGHU &RQIHUHQFHRI0LQLVWHUVRI-XVWLFHRI,EHUR$PHULFDQ ,WDOVRHPSRZHUVDXWKRULWLHVLQWKHGLIIHUHQWEUDQFKHV &RXQWULHVRQWKHGHƄQLWLRQDQGSXQLVKPHQWRIF\EHU RIJRYHUQPHQWWRFDUU\RXWDGPLQLVWUDWLYHIRUPDOLWLHV FULPH,WKDVEHHQLQYLWHGE\WKH&RXQFLORI(XURSHWR WKURXJK HOHFWURQLF PHDQV DQG WR XVH HOHFWURQLF ƄOHV accede to the Convention on Cybercrime, but has not DQG GLJLWDO VLJQDWXUHV LQ WKHLU DFWLRQV HLWKHU DPRQJ \HWGRQHVR WKHPVHOYHVRUZLWKSULYDWHSDUWLHV

 6HHKWWSZZZGRIJREP[QRWDBGHWDOOHSKS"FRGLJR  7KH5HJXODWLRQVWRWKH'LJLWDO6LJQDWXUHV$FW'HFUHH  IHFKD  1R  RI  1RYHPEHU  DXWKRUL]H WKH II. REPORT ON LEGISLATION IN THE LATIN AMERICAN COUNTRIES 47

'LUHFWRUDWH*HQHUDOIRU7HFKQRORJ\RIWKH0LQLVWU\RI PLFURVPDOO DQG PHGLXPVL]HG HQWHUSULVHV DQG HQ )LQDQFHDQG3XEOLF&UHGLWWRDFWDVWKHOHDGDJHQF\ FRXUDJHVWKHLUSDUWLFLSDWLRQLQFRQWUDFWLQJSURFHVVHV IRUWKHHOHFWURQLFVLJQDWXUHDFFUHGLWDWLRQSURFHVVDQG RXWOLQH WKH SRZHUV RI WKH &HUWLƄFDWLRQ $XWKRULW\ DQG 7KH*HQHUDO5HJXODWLRQVWRWKH3XEOLF6HFWRU$GPLQ WKHREOLJDWLRQVDQGGXWLHVRIFHUWLƄFDWLRQVHUYLFHSUR LVWUDWLYH3URFXUHPHQW$FW $FW1R RIDQG YLGHUV 'HFHPEHUH[SDQGWKHSRZHUVRIWKH'LUHFWR UDWH*HQHUDOIRU6WDWH3URFXUHPHQWDVWKHRYHUVLJKW ,QWKHƄQDQFLDOƄHOGWKH*HQHUDO$FWRQ%DQNV)LQDQ DJHQF\ IRU WKH SXEOLF VHFWRU SURFXUHPHQW V\VWHP FLDO,QVWLWXWLRQV1RQ%DQNLQJ,QVWLWXWLRQVDQG)LQDQFLDO DXWKRUL]LQJLWWRVHWJXLGHOLQHVDQGHVWDEOLVKPHFKD *URXSVRI1RYHPEHUDXWKRUL]HVEDQNVWR nisms and procedures for the use of electronic or XVHFRPSXWHUDQGPLFURƄOPV\VWHPVLQSURYLGLQJWKHLU PDQXDOIRUPDWVIRUUHFRUGLQJLQIRUPDWLRQRQFRQWUDF VHUYLFHV 'RFXPHQWV UHSURGXFHG E\ WKHVH V\VWHPV WRUV ,W DOVR HVWDEOLVKHV WKH RQOLQH SURYLGHUV UHJLVWU\ have full probative value, provided the mechanisms WR EH RSHUDWHG E\ WKH 'LUHFWRUDWH*HQHUDO IRU 6WDWH XVHG IRU UHSURGXFWLRQ PHHW WKH UHTXLUHPHQWV RI WKH 3URFXUHPHQWIRUUHJLVWHULQJDOOLQGLYLGXDOVRUOHJDOHQ 2IƄFH RI WKH 6XSHULQWHQGHQW RI %DQNV DQG WKDW WKH WLWLHVQDWLRQDODQGIRUHLJQWKDWDUHQRWSURKLELWHGIURP GRFXPHQWVDUHGXO\VLJQHGE\DQDXWKRUL]HGRIƄFLDO HQWHULQJLQWRFRQWUDFWVZLWKWKH6WDWH7KHSURFHGXUHV DQGIRUPVWREHXVHGIRULQFOXGLQJRUGHOHWLQJHQWULHV 6SHFLDO PHQWLRQ VKRXOG EH PDGH RI 'HFLVLRQ 1R WKHDUHDVWKDWQHHGWRPDNHSXUFKDVHVDQGWKHRI &'6,%2,)$%5 RI  $SULO  ƄFLDOVFRQFHUQHGDUHDOOOLVWHGRQWKHZHEVLWH ZZZ JRYHUQLQJHOHFWURQLFWUDQVDFWLRQVFDUULHGRXWE\ƄQDQ QLFDUDJXDFRPSUDJREQL  FLDOLQVWLWXWLRQVZKLFKZDVLVVXHGE\WKH2IƄFHRIWKH 6XSHULQWHQGHQWRI%DQNVDQG2WKHU)LQDQFLDO,QVWLWX ,Q UHJDUG WR FXVWRPV 1LFDUDJXD KDV DGRSWHG WKH WLRQV 8QLƄHG&HQWUDO$PHULFDQ&XVWRPV&RGHDQGLWV5HJ XODWLRQVDQGWKH&$)7$'5$JUHHPHQW ,QUHJDUGWRRQOLQHJRYHUQPHQWWUDQVDFWLRQV$FW1R E  &RQVXPHUSURWHFWLRQ  RQ 6LPSOLƄFDWLRQ RI )RUPDOLWLHV DQG 6HUYLFHV LQ 3XEOLF $GPLQLVWUDWLRQ RI  $XJXVW  OD\V GRZQ 7KH&RQVXPHU3URWHFWLRQ$FW $FW1R RI-XO\ WKHEDVHVDQGSULQFLSOHVIRUVLPSOLI\LQJDQGUDWLRQDO SURYLGHVIRUWKHIXQGDPHQWDOULJKWVRIFRQVXP L]LQJIRUPDOLWLHVDQGVHUYLFHVLQRUGHUWRHQVXUHWKDW HUV HQYLVDJHG LQ 8QLWHG 1DWLRQV *HQHUDO $VVHPEO\ public institutions follow standards of economy, trans UHVROXWLRQ  RQ JXLGHOLQHV IRU FRQVXPHU SUR SDUHQF\ FHOHULW\ HIƄFDF\ DQG KHOSIXOQHVV VR DV WR WHFWLRQLQFOXGLQJWKHULJKWWRLQIRUPDWLRQDQGWKHULJKW achieve prompt and effective solutions to problems WRVDIHSURGXFWV,WDOVRSURYLGHVIRUWKHULJKWRIFRQ SRVHG E\ XVHUV 7KH $FW SURPRWHV LPSOHPHQWDWLRQ VXPHUVWRRSWRXWRIVDOHVPDGHUHPRWHO\WKHULJKWWR RIWKH6LQJOH:LQGRZIRU)RUPDOLWLHVDQG6HUYLFHVDV SULYDF\ DQG WKH ULJKW WR UHDO DQG HIIHFWLYH SURWHFWLRQ ZHOODVWKHXVHRIHOHFWURQLFPHDQVWRH[SHGLWHSUR LQHOHFWURQLFWUDQVDFWLRQV$EXVLYHFODXVHVLQƄQDQFLDO FHGXUHV VHUYLFHV FRQWUDFWV LQFOXGH WKRVH ZKLFK H[RQHUDWH Ƅ nancial institutions from liability for viruses, fraudulent 7KH 3XEOLF 6HFWRU $GPLQLVWUDWLYH 3URFXUHPHQW $FW SURJUDPV RU XQDXWKRUL]HG RU LOOLFLW H[SRVXUH RI WKHLU $FW1R RIDQG1RYHPEHUJRYHUQV VHUYLFHVE\HOHFWURQLFPHDQV WKHVXEVWDQWLYHDQGSURFHGXUDODVSHFWVRISUHSDULQJ DZDUGLQJ H[HFXWLQJ DQG WHUPLQDWLQJ SURFXUHPHQW 7KH$FWDOVRFRYHUVSURFXUHPHQWRISURGXFWVDQGƄ FRQWUDFWV E\ SXEOLF DJHQFLHV 7KH $FW DOVR DSSOLHV nancial services by electronic means and attributes WRSXEOLFHQWHUSULVHVDQGƄQDQFLDOHQWLWLHVZKHQWKHLU WRWKHPWKHVDPHSUREDWLYHYDOXHDQGOHJDOHIIHFWDV SXUFKDVHV DUH UHODWHG WR DGPLQLVWUDWLYH DFWLYLWLHV ,W FRQWUDFWVFRQFOXGHGLQSHUVRQ,WUHFRJQL]HVHOHFWURQLF DXWKRUL]HVWKH'LUHFWRUDWH*HQHUDOIRU6WDWH3URFXUH transactions and outlines the information that must PHQW DV WKH RYHUVLJKW DJHQF\ IRU WKH SXEOLF VHFWRU be provided to consumers prior to the conclusion of procurement system, to monitor the actions of con DQRQOLQHWUDQVDFWLRQLQFOXGLQJLQIRUPDWLRQRQSK\VL WUDFWLQJHQWLWLHV1HJOLJHQWRUFRUUXSWEHKDYLRXURQWKH cal domicile, electronic address and other means for SDUWRISXEOLFRIƄFLDOVPXVWEHUHSRUWHGWRWKH2IƄFH VXEPLWWLQJFRPSODLQWVDQGFODULƄFDWLRQDVZHOODVLQ RIWKH&RPSWUROOHU*HQHUDORIWKH5HSXEOLF7KH'LUHF IRUPDWLRQRQJRRGVDQGVHUYLFHVDYRLGLQJGHFHSWLYH WRUDWH*HQHUDO LV HPSRZHUHG WR VDQFWLRQ SURYLGHUV FRPPHUFLDO SUDFWLFHV WKDW FRXOG HQFRXUDJH IUDXG RU FRQWUDFWRUVZKRYLRODWHWKH$FWWKH*HQHUDO5HJXOD FUHDWH FRQIXVLRQ ,W UHTXLUHV SURYLGHUV WR XVH UHOLDEOH WLRQVWRWKH$FWRURWKHUDGPLQLVWUDWLYHUXOHVUHODWLQJ WHFKQRORJ\DQGWHFKQLFDOGHYLFHVWRHQVXUHWKHVHFX WR SURFXUHPHQW 7KH $FW SURPRWHV GHYHORSPHQW RI ULW\ DQG FRQƄGHQWLDOLW\ RI WKH LQIRUPDWLRQ WUDQVPLWWHG 48 Study on the harmonization of cyberlegislation in Latin America

and provided by consumers in online transactions and DJHQFLHVWKDWGRQRWSURYLGHVXLWDEOHOHYHOVRIVHFXULW\ WRLQIRUPWKHPDERXWVXFKPHDVXUHV DQGSURWHFWLRQ

$V UHJDUGV RQOLQH SXUFKDVHV RI JRRGV DQG VHUYLFHV 3XEOLFRUSULYDWHLQGLYLGXDOVDQGHQWLWLHVWKDWXVHVWRUH ZLWKLQ WKH QDWLRQDO WHUULWRU\ VXSSOLHUV DUH UHTXLUHG WR or transfer private information of their clients or users SURYLGH HOHFWURQLF LQYRLFHV DQG WR NHHS D UHFRUG RI DUHUHTXLUHGWR L HQVXUHWKDWWKHLQIRUPDWLRQLVXVHG electronic payments, as well as to send the consumer in a manner that is appropriate, proportional and nec the sales contract with full information on terms and essary in respect of the scope and the purposes for FRQGLWLRQVFRVWVDQGJXDUDQWHHV ZKLFKLWLVFROOHFWHG LL REWDLQWKHFRQVHQWRIWKHGDWD VXEMHFWWRSURYLGHWKHGDWD LLL XVHWKHGDWDIRUWKH F  3URWHFWLRQRISHUVRQDOGDWD SXUSRVHVIRUZKLFKWKH\ZHUHREWDLQHGDQG LY WDNH WHFKQLFDO DQG RUJDQL]DWLRQDO PHDVXUHV WR JXDUDQWHH 7KH 3ROLWLFDO &RQVWLWXWLRQ RI WKH 5HSXEOLF RI 1LFDUD WKHVHFXULW\DQGFRQƄGHQWLDOLW\RISHUVRQDOGDWD JXD RI  1RYHPEHU  HQVKULQHV WKH ULJKW RI DOO SHUVRQV WR WKHLU DQG WKHLU IDPLO\pVSULYDWH OLIH WKH 9LRODWLRQVRIWKH$FWDUHSXQLVKHGZLWKDGPLQLVWUDWLYH inviolability of their residence, correspondence and DQGFULPLQDOVDQFWLRQV7KH$FWJUDQWVWKHGDWDVXE communications of all types, as well as access to MHFWWKHULJKWWRUHTXHVWIURPWKH'LUHFWRUDWHIRUWKH NQRZOHGJH RI DOO LQIRUPDWLRQ UHJDUGLQJ WKHP LV FRQ 3URWHFWLRQ RI 3HUVRQDO 'DWD LQIRUPDWLRQ FRQFHUQLQJ WDLQHG LQ JRYHUQPHQW UHFRUGV DQG WKH UHDVRQV DQG WKHH[LVWHQFHRIƄOHVRQKLPRUKHULQSHUVRQDOGDWD SXUSRVHIRUWKHSRVVHVVLRQRIVXFKLQIRUPDWLRQ ƄOHVWKHSXUSRVHIRUZKLFKWKHGDWDDUHKHOGDQGWKH LGHQWLW\RIWKHSDUWLHVUHVSRQVLEOH,WDOVRDOORZVKLP 7KH3XEOLF,QIRUPDWLRQ$FFHVV$FW $FW1R RI RUKHUWRUHTXHVWWKDWWKHSHUVRQDOGDWDEHFRUUHFWHG -XQHLQFRUSRUDWHVWKHULJKWRIKDEHDVGDWD PRGLƄHGGHOHWHGVXSSOHPHQWHGLQFOXGHGXSGDWHG WR SURWHFW SULYDWH SHUVRQDO GDWD DSSHDULQJ LQ SXEOLF RUFDQFHOOHG7KH$FWFODVVLƄHVYLRODWLRQVDVPLQRURU RUSULYDWHƄOHVUHFRUGVGDWDEDVHVDQGRWKHUWHFKQL serious and establishes administrative sanctions, in cal media, the disclosure of which is an invasion of GHSHQGHQWO\RIDQ\FLYLORUFULPLQDOOLDELOLW\WKDWPLJKW SHUVRQDOIDPLO\ SULYDF\ LI WKH LQIRUPDWLRQ GLVFORVHG DOVRDSSO\ consists of sensitive personal data or information re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pVGXW\ GOLQJRIVXFKLQIRUPDWLRQLQSXEOLFRUSULYDWHƄOHVLQ WRIDFLOLWDWHWKHPHDQVQHFHVVDU\IRUFUHDWLQJDQGGLV RUGHUWRJXDUDQWHHWKHULJKWWRSULYDF\RILQGLYLGXDOV VHPLQDWLQJWKHLUZRUNVDQGSURWHFWLQJWKHLUFRS\ULJKW DQGWKHULJKWWRPDNHWKHLURZQGHFLVLRQVUHJDUGLQJ WKH XVH RI WKHLU LQIRUPDWLRQ 7KH 'LUHFWRUDWH IRU WKH 7KH&RS\ULJKWDQG5HODWHG5LJKWV$FW $FW1R  3URWHFWLRQRI3HUVRQDO'DWDLQWKH0LQLVWU\RI)LQDQFH RI-XO\PRVWUHFHQWO\DPHQGHGRQ0DUFK DQG3XEOLF&UHGLWLVUHVSRQVLEOHIRUHQIRUFLQJWKH$FW  SURWHFWV FRPSXWHU SURJUDPV RQ WKH VDPH ZKLFKFODVVLƄHVDOOSHUVRQDOGDWDDVVLPSOHSHUVRQDO WHUPVDVOLWHUDU\ZRUNV6XFKSURWHFWLRQLVH[WHQGHG data, electronic personal data, sensitive personal to include technical documentation and user manu GDWD KHDOWKUHODWHG SHUVRQDO GDWD DQG FRPPHUFLDO DOV 7KH $FW DOVR SURWHFWV GDWDEDVHV UHSURGXFWLRQ SHUVRQDOGDWD,WDOVRHVWDEOLVKHVWKHUHTXLUHPHQWWR IRUSHUVRQDOXVHH[FOXGHVUHSURGXFWLRQRIDOORUPD UHJLVWHUƄOHVFRQWDLQLQJSHUVRQDOGDWDZLWKWKH'LUHFWR MRUSRUWLRQVRIQXPHULFDOGDWDEDVHV7KH$FWGHƄQHV UDWHIRUWKH3URWHFWLRQRI3HUVRQDO'DWDDQGSURKLELWV DVDQRIIHQFHWKHDFWRIFLUFXPYHQWLQJWHFKQRORJLFDO transfer of personal data to countries or international measures in order to permit unauthorized access to a II. REPORT ON LEGISLATION IN THE LATIN AMERICAN COUNTRIES 49

ZRUNRUWRDQLQWHUSUHWDWLRQRUSHUIRUPDQFHRIDSUR WKHGLVWLQJXLVKLQJVLJQDVDGRPDLQQDPHHPDLODG WHFWHGSKRQRJUDPRURWKHUSURWHFWHGREMHFW GUHVVRUQDPHRUGHVLJQDWLRQLQHOHFWURQLFDQGRWKHU similar media used for electronic communications or :LWKUHJDUGWRLQGXVWULDOSURSHUW\DUWLFOHRIWKH$FW HFRPPHUFH RQ3DWHQWVIRU,QYHQWLRQV8WLOLW\0RGHOVDQG,QGXVWULDO 'HVLJQV $FW1R RIDQG6HSWHPEHU I  &\EHUFULPHDQGLQIRUPDWLRQVHFXULW\ stipulates that mathematical methods or computer SURJUDPV FRQVLGHUHG LQ LVRODWLRQ DUH QRW SDWHQWDEOH 7KH &ULPLQDO &RGH $FW 1R   RI  1RYHPEHU LQYHQWLRQV7KH7UDGHPDUNVDQG2WKHU'LVWLQJXLVKLQJ  SURYLGHV SHQDOWLHV IRU LOOHJDOO\ RSHQLQJ LQWHU 6LJQV$FW $FW1R RI$SULOHVWDEOLVKHV FHSWLQJRULQDQ\RWKHUZD\OHDUQLQJWKHFRQWHQWRID WKH UHTXLUHPHQWV IRU WKH SURWHFWLRQ RI WUDGHPDUNV OHWWHUVHDOHGELGRUWHOHJUDSKLFWHOHPDWLFHOHFWURQLF domain names, business names, denominations of RURWKHUPHVVDJHQRWDGGUHVVHGWRWKHSHUVRQFDU RULJLQDQGRWKHUGLVWLQJXLVKLQJVLJQV U\LQJ RXW VXFK DQ DFW ,W DOVR SXQLVKHV DQ\RQH ZKR without authorization promotes, facilitates, authorizes, ,QWKHDUHDRILQWHUQDWLRQDOLQWHOOHFWXDOSURSHUW\ULJKWV ƄQDQFHVFUHDWHVRUPDUNHWVDGDWDEDVHRUFRPSXWHU 1LFDUDJXDKDVUDWLƄHGWKHIROORZLQJLQVWUXPHQWV UHFRUGFRQWDLQLQJLQIRUPDWLRQWKDWFDQKDUPLQGLYLGX • :,32 &RS\ULJKW 7UHDW\ DQG :,32 3HUIRUPDQFHV DOVRUOHJDOHQWLWLHV DQG3KRQRJUDPV7UHDW\ The Criminal Code also punishes the unauthorized • %HLMLQJ7UHDW\RQ$XGLRYLVXDO3HUIRUPDQFHV  use of computerized records of another or unauthor • 3URWRFRO WR WKH &HQWUDO $PHULFDQ $JUHHPHQW IRU L]HG HQWU\ E\ DQ\ PHDQV LQ DQRWKHUpV GDWDEDVH RU WKH3URWHFWLRQRI,QGXVWULDO3URSHUW\ HOHFWURQLFƄOHV,WHVWDEOLVKHVVDQFWLRQVIRUDQ\SHUVRQ • 'RPLQLFDQ 5HSXEOLF&HQWUDO $PHULFD8QLWHG ZKRZLWKRXWDXWKRUL]DWLRQPDNHVXVHE\DQ\LQIRUPD 6WDWHV)UHH7UDGH$JUHHPHQW &$)7$'5 tional means, of information, data, written or electronic GRFXPHQWVFRPSXWHUUHJLVWULHVRURWKHUPHGLDRURE • 3DULV &RQYHQWLRQ IRU WKH 3URWHFWLRQ RI ,QGXVWULDO MHFWVWKDWFRQWDLQDEXVLQHVVVHFUHW 3URSHUW\  • %HUQH &RQYHQWLRQ IRU WKH 3URWHFWLRQ RI /LWHUDU\ J  3HQGLQJOHJLVODWLRQDQGFKDOOHQJHV DQG$UWLVWLF:RUNV $PRQJRWKHUFKDOOHQJHV1LFDUDJXDQHHGVWRDGGUHVV • &RQYHQWLRQ IRU WKH 3URWHFWLRQ RI 3URGXFHUV RI the issue of cybersecurity and establish a national 3KRQRJUDPV$JDLQVW8QDXWKRUL]HG'XSOLFDWLRQRI FRPSXWHUVHFXULW\LQFLGHQWUHVSRQVHWHDPDORQJZLWK 7KHLU3KRQRJUDPV *HQHYD&RQYHQWLRQ OHJLVODWLRQWRIXUWKHUWKHSURFHVV7KHPDLQOHJLVODWLYH • ,QWHUQDWLRQDO&RQYHQWLRQIRUWKH3URWHFWLRQRI3HU PHDVXUHV EHLQJ UHYLHZHG E\ WKH 1DWLRQDO $VVHPEO\ IRUPHUV 3URGXFHUV RI 3KRQRJUDPV DQG %URDG LQFOXGHWKHSUHOLPLQDU\ELOORQHJRYHUQPHQWDQGWKH FDVWLQJ2UJDQL]DWLRQV 5RPH&RQYHQWLRQ preliminary proposal for a special law on protection • %UXVVHOV&RQYHQWLRQUHODWLQJWRWKH'LVWULEXWLRQRI DJDLQVWF\EHUFULPH 3URJUDPPH&DUU\LQJ6LJQDOV7UDQVPLWWHGE\6DW ellite PANAMA • $JUHHPHQWRQ7UDGH5HODWHG$VSHFWVRI,QWHOOHF WXDO3URSHUW\5LJKWV 75,36 DGPLQLVWHUHGE\:72 7KHPRVWLPSRUWDQWOHJLVODWLRQIRUWKHGHYHORSPHQWRI HFRPPHUFHLQ3DQDPDLV$FW1RRI-XO\ H  'RPDLQQDPHV ZKLFK GHƄQHV DQG UHJXODWHV HOHFWURQLF GRFXPHQWV :LWKUHJDUGWRGRPDLQQDPHVDQGWKHPDWWHUVFRY DQG HOHFWURQLF VLJQDWXUHV DQG DOORZV WKH SURYLVLRQ HUHG E\ WKH 7UDGHPDUNV DQG 2WKHU 'LVWLQJXLVKLQJ RI WHFKQRORJLFDO VWRUDJH VHUYLFHV IRU GRFXPHQWV DV 6LJQV $FW $FW 1R   1,& 1, KWWSQLFQL  LV WKH ZHOODVHOHFWURQLFVLJQDWXUHFHUWLƄFDWLRQVHUYLFHV7KLV HQWLW\UHVSRQVLEOHIRUDGPLQLVWHULQJWKHFRXQWU\pVWRS $FW DOVR LQFOXGHV SURYLVLRQV IRU WKH GHYHORSPHQW RI OHYHO GRPDLQ QDPH QL $V WKH FRXQWU\pV UHJLVWHULQJ HFRPPHUFHDVIROORZV DXWKRULW\ 1,& 1, KDV DGRSWHG WKH ,&$11 8QLIRUP D  (OHFWURQLFWUDQVDFWLRQVHOHFWURQLFVLJQDWXUHV 'RPDLQ1DPH'LVSXWH5HVROXWLRQ3ROLF\ZKLFKFRQ IRUPV WR LQWHUQDWLRQDO EHVW SUDFWLFHV ,W UHFRJQL]HV 7KH SXUSRVH RI $FW 1R  LV WR HVWDEOLVK D UHJXOD WKH GLVSXWHUHVROXWLRQ VHUYLFHV SURYLGHG WKURXJK WKH WRU\ IUDPHZRUN IRU WKH FUHDWLRQ XVH DQG VWRUDJH RI :,32$UELWUDWLRQDQG0HGLDWLRQ&HQWUH HOHFWURQLF GRFXPHQWV DQG HOHFWURQLF VLJQDWXUHV DV 7KH 7UDGHPDUNVDQG 2WKHU 'LVWLQJXLVKLQJ 6LJQV $FW ZHOO DV IRU UHJLVWUDWLRQ DQG RYHUVLJKW RI SURYLGHUV RI $FW1R UHFRJQL]HVDVDWUDGHPDUNWKHXVHRI WHFKQRORJLFDO VWRUDJH VHUYLFHV IRU GRFXPHQWV DQG 50 Study on the harmonization of cyberlegislation in Latin America

SURYLGHUVRIHOHFWURQLFVLJQDWXUHFHUWLƄFDWLRQVHUYLFHV &RQYHQWLRQRQWKH8VHRI(OHFWURQLF&RPPXQLFDWLRQV LQ3DQDPD LQ,QWHUQDWLRQDO&RQWUDFWVZKLFK3DQDPDKDVVLJQHG DQG ZKLFK LV LQ WKH SURFHVV RI EHLQJ UDWLƄHG E\ WKH 7KH $FW LQFRUSRUDWHV VHYHUDO HOHPHQWV RI WKH 81 1DWLRQDO$VVHPEO\ &,75$/ PRGHO ODZV RQ HOHFWURQLF FRPPHUFH DQG RQ HOHFWURQLF VLJQDWXUHV DV ZHOO DV HOHPHQWV RI WKH ,QWKHDUHDRIƄQDQFH'HFLVLRQ1RRIRIWKH (XURSHDQGLUHFWLYHVRQHFRPPHUFHHOHFWURQLFVLJQD 2IƄFH RI WKH 6XSHULQWHQGHQW RI %DQNV OD\V GRZQ WXUHDQGUHPRWHO\KDQGOHGGLUHFWPDUNHWLQJ7KH$FW JXLGHOLQHVRQHOHFWURQLFEDQNLQJDQGUHODWHGULVNPDQ HVWDEOLVKHVUHJXODWLRQVRQDYDULHW\RIDVSHFWVRIHOHF DJHPHQWUHTXLULQJEDQNLQJLQVWLWXWLRQVLQ3DQDPDWR tronic transactions between private parties and with modernize the electronic systems used to provide SXEOLFDJHQFLHV WKHLUVHUYLFHV $FW 1R  HVWDEOLVKHV D UHJXODWRU\ IUDPHZRUN IRU ,QWKHFRQWH[WRIJRYHUQPHQW$FW1RDXWKRUL]HV certain commercial internet transactions, primar WKH6WDWHWRXVHWHFKQRORJLFDOGRFXPHQWVWRUDJHLQ LO\ JRYHUQLQJ ZKDW LQIRUPDWLRQ LV SURYLGHG SULRU DQG WHUQDOO\DQGLQLWVUHODWLRQVZLWKSULYDWHSDUWLHV$FW1R VXEVHTXHQW WR PDNLQJ HOHFWURQLF FRQWUDFWV DQG VHW RI1RYHPEHUVHWVUXOHVIRUWKHXVHRIHOHF WLQJIRUWKFRQGLWLRQVIRUWKHYDOLGLW\DQGOHJDOIRUFHRI WURQLFPHGLDLQWKHJRYHUQPHQWIRUPDOLWLHVSUHYLRXVO\ VXFKFRQWUDFWV,WRXWOLQHVWKHREOLJDWLRQVDQGUHVSRQ DXWKRUL]HGE\([HFXWLYH'HFUHH1RRI6HS VLELOLWLHVRIHQWLWLHVSURYLGLQJFRPPHUFLDOVHUYLFHVYLD WHPEHUNQRZQDVq3DSHUOHVV3DQDPDr WKH,QWHUQHWLQFOXGLQJWKRVHDFWLQJDVLQWHUPHGLDULHV ([HFXWLYH'HFUHH1RRI2FWREHUHV IRUWKHWUDQVPLVVLRQRIFRQWHQWVWRUDJHDQGWHPSR WDEOLVKHG WKH (OHFWURQLF 5HJLVWU\ 6\VWHP EDVHG RQ UDU\FRSLHVDORQJZLWKWKHOLPLWDWLRQVRQOLDELOLW\WKH WKHHOHFWURQLFIROLRWHFKQLTXHLQFRUSRUDWLQJWKHXVHRI HOHFWURQLF H[FKDQJH RI FRPPHUFLDO LQIRUPDWLRQ DQG HOHFWURQLF VLJQDWXUH WKDW LV UHFRJQL]HG IRU DOO RSHUD GRFXPHQWDWLRQ LQFOXGLQJ RIIHUV SURPRWLRQV DQG WLRQV DQG UHJLVWU\ SURFHGXUHV LQ WKH 3XEOLF 5HJLVWU\ FRPSHWLWLRQVDQGWKHVDQFWLRQVDSSO\LQJWRSURYLGHUV LQRUGHUWRVWUHQJWKHQVHFXULW\DWWULEXWHVLHDXWKHQ RIFRPPHUFLDOVHUYLFHVYLDHOHFWURQLFPHGLD WLFLW\LQWHJULW\DQGQRQUHSXGLDWLRQRIGRFXPHQWVIRU $FW 1R  UHFRJQL]HV WKH IXQFWLRQDO HTXLYDOHQFH RI UHJLVWU\RSHUDWLRQV VLJQHGSULQWHGGRFXPHQWVDQGHOHFWURQLFGRFXPHQWV ,QWKHDUHDRIFXVWRPV'HFUHH/DZ1RRI)HE ZLWKDGYDQFHGHOHFWURQLFVLJQDWXUHEDFNHGE\DGLJL UXDU\  FUHDWHG WKH 1DWLRQDO &XVWRPV $XWKRULW\ WDOFHUWLƄFDWHLVVXHGE\DFHUWLƄFDWLRQVHUYLFHWKDWKDV DQGODLGGRZQDQXPEHURISURYLVLRQVDOORZLQJIRUWKH EHHQ GXO\ DFFUHGLWHG EHIRUH WKH 3XEOLF 5HJLVWU\ ,W XVHRIHOHFWURQLFPHGLDIRUFXVWRPVSURFHGXUHV DOVR UHFRJQL]HV IRUHLJQ GLJLWDO FHUWLƄFDWHV LVVXHG E\ competent authorities of other countries, provided :LWK UHJDUG WR WD[DWLRQ $FW 1R  RI  HVWDE WKH\FRPSO\ZLWKWKHVWDQGDUGVUHTXLUHGE\WKH3XEOLF OLVKHV WKH OHJDO YDOLGLW\ RI HOHFWURQLF LQYRLFHV DQG 5HJLVWU\ UHFRJQL]HV WKH YDOLGLW\ IRU WD[ SXUSRVHV RI FRPPHU FLDOWUDQVDFWLRQVFDUULHGRXWE\HOHFWURQLFPHDQV7KH ,WDOVRUHFRJQL]HVWKDWHOHFWURQLFGRFXPHQWVDUHDG 7D[&RGHDQG'HFLVLRQ1RRI$XJXVW missible as evidence and have the same probative RIWKH'LUHFWRUDWH*HQHUDORI,QWHUQDO5HYHQXH ZHLJKW DV SDSHU GRFXPHQWV 7KH WUXVWZRUWKLQHVV RIWKH0LQLVWU\RI(FRQRP\DQG)LQDQFHDXWKRUL]HWKH of the manner in which an electronic document has VXEPLVVLRQRIVZRUQVWDWHPHQWVE\HOHFWURQLFPHGLD EHHQJHQHUDWHGƄOHGRUFRPPXQLFDWHGLVWREHWDNHQ LQWRDFFRXQWLQDVVHVVLQJLWVSUREDWLYHYDOXHDVLVWKH E  &RQVXPHUSURWHFWLRQ UHOLDELOLW\RIWKHZD\LQZKLFKWKHLQWHJULW\RIWKHLQIRU The Constitution mandates that everyone has the PDWLRQKDVEHHQVDIHJXDUGHG ULJKW WR REWDLQ JRRGV DQG VHUYLFHV RI TXDOLW\ DQG WR KDYHDFFXUDWHFOHDUDQGVXIƄ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tion, which provides further support for the formation RI FRPPHUFLDO VHUYLFH SURYLGHUV XVLQJ WKH ,QWHUQHW RI FRQWUDFWV WKURXJK HOHFWURQLF PHDQV DQG LQFRU LQFOXGLQJ SURYLGHUV RI LQWHUPHGLDWLRQ VHUYLFHV 7KH porates several measures from the United Nations $FWLQFOXGHVPHDVXUHVWROLPLWXQVROLFLWHGFRPPHUFLDO II. REPORT ON LEGISLATION IN THE LATIN AMERICAN COUNTRIES 51

FRPPXQLFDWLRQVLQFOXGLQJWKRVHVHQWYLDWKH,QWHUQHW • :,32&RS\ULJKW7UHDW\DQGWKH3HUIRUPDQFHVDQG ,WDOVRDXWKRUL]HVWKHXVHRIVHDOVRIWUXVWWRSURPRWH 3KRQRJUDPV7UHDW\ XVH RI WKH ,QWHUQHW DV D VHFXUH PHGLXP IRU RIIHULQJ • ,WKDVUDWLƄHGWKHIROORZLQJLQVWUXPHQWV DQGREWDLQLQJFRPPHUFLDOJRRGVDQGVHUYLFHV • 3URWRFRO WR WKH &HQWUDO $PHULFDQ $JUHHPHQW IRU F  3URWHFWLRQRISHUVRQDOGDWD WKH3URWHFWLRQRI,QGXVWULDO3URSHUW\ 7KH &RQVWLWXWLRQ RI  DV DPHQGHG RQ  1R • 'RPLQLFDQ 5HSXEOLF&HQWUDO $PHULFD8QLWHG YHPEHU  JXDUDQWHHV WKH LQYLRODELOLW\ RI SULYDWH 6WDWHV)UHH7UDGH$JUHHPHQW &$)7$'5 communications, which may not be intercepted or re • $JUHHPHQWRQ7UDGH5HODWHG$VSHFWVRI,QWHOOHF FRUGHGH[FHSWXQGHUMXGLFLDORUGHU)DLOXUHWRUHVSHFW tXDO3URSHUW\5LJKWV 75,36 DGPLQLVWHUHGE\:72 this prohibition renders the results of such interception RUUHFRUGLQJLQDGPLVVLEOHDVHYLGHQFHZLWKRXWSUHMX ,QWKHDUHDRIFRS\ULJKWDQGUHODWHGULJKWV$FW1R dice to any criminal liability that may be incurred by RI2FWREHUZDVSDVVHGWRDEURJDWH$FW1R VDLGLQWHUFHSWLRQRUUHFRUGLQJ,WDOVRJLYHVDOOSHUVRQV RI$XJXVWLQRUGHUWREULQJLWLQOLQHZLWK WKH ULJKW WR DFFHVV SHUVRQDO LQIRUPDWLRQ RQ WKHP WKHGLJLWDOHQYLURQPHQWRIWKHLQIRUPDWLRQVRFLHW\7KH selves contained in public and private databases and VFRSHRIWKH$FWZDVH[SDQGHGWRLQFOXGHSURWHFWLRQ WR UHTXHVW WKH FRUUHFWLRQ DQG SURWHFWLRQ DV ZHOO DV for software and databases and to elaborate on con WKH UHPRYDO RI VXFK LQIRUPDWLRQ 6XFK LQIRUPDWLRQ FHSWVVXFKDVLQIRUPDWLRQRQPDQDJHPHQWRIULJKWV PD\RQO\EHFROOHFWHGIRUVSHFLƄFSXUSRVHVZLWKWKH DQGHIIHFWLYHWHFKQRORJ\IRUSURWHFWLQJRQHpVRZQRQ FRQVHQW RI WKH GDWD VXEMHFW RU E\ DXWKRUL]DWLRQ RI D OLQHLGHQWLW\:LWKUHJDUGWRWKHUHODWHGULJKWVRIDUWLVWV JRYHUQPHQWDJHQF\SXUVXDQWWRWKHODZ SHUIRUPHUV DQG EURDGFDVWLQJ RUJDQL]DWLRQV LW GH ƄQHVWKHFRQFHSWVRISKRQRJUDPDQGYLGHRJUDPDQG 7KH&RQVWLWXWLRQDOVRJLYHVDOOSHUVRQVWKHULJKWWRƄOH UHFRJQL]HV WKH ULJKW RI SXEOLFDWLRQ YLD DQ\ PHGLXP KDEHDVGDWDDFWLRQVWRJXDUDQWHHWKHLUULJKWWRDFFHVV 5HJXODWLRQVWRWKH$FWDUHEHLQJGHYHORSHG SHUVRQDO LQIRUPDWLRQ UHJDUGLQJ WKHP LQ JRYHUQPHQW databases, or in private databases when such data H  'RPDLQQDPHV EDVHVRUUHFRUGVEHORQJWRƄUPVWKDWSURYLGHVHUYLFHV WRWKHSXEOLFRUDUHLQIRUPDWLRQSURYLGHUV+DEHDVGDWD ,Q UHJDUG WR GRPDLQ QDPHV 1,&3DQDPD KWWSQLF DFWLRQFDQEHXVHGWRFRQƄGHQWLDOO\UHTXHVWFRUUHFWLRQ SD  ZKLFK LV KRXVHG DW WKH 7HFKQRORJLFDO8QLYHUVLW\ XSGDWLQJUHFWLƄFDWLRQUHPRYDORUSUHVHUYDWLRQRISHU RI 3DQDPD LV WKH HQWLW\ UHVSRQVLEOH IRU DGPLQLVWHU VRQDOLQIRUPDWLRQRUGDWD LQJWKHFRXQWU\pVWRSOHYHOGRPDLQQDPHSD$VWKH ,QWHUQHW UHJLVWU\ DXWKRULW\ 1,&3DQDPD KDV DGRSWHG $FW1RHVWDEOLVKHVDVSHFLDOUHJLPHWRJXDUDQWHH WKH,&$118QLIRUP'RPDLQ1DPH'LVSXWH5HVROXWLRQ the inviolability of the information deposited in data 3ROLF\ZKLFKFRQIRUPVWRLQWHUQDWLRQDOEHVWSUDFWLFHV EDVHVDVEDFNXSIRURIIVKRUHRSHUDWLRQVRISULYDWHRU DQGLWUHFRJQL]HVWKHGLVSXWHUHVROXWLRQVHUYLFHVSUR SXEOLFHQWHUSULVHVLQFOXGLQJVWDWHDQGLQWHUQDWLRQDORU YLGHG WKURXJK WKH :,32 $UELWUDWLRQ DQG 0HGLDWLRQ JDQL]DWLRQV$FW1RRIRI0D\DV &HQWUH DPHQGHGDQGDGGHGWRE\$FW1RRIRI 0D\FRQWDLQVVHYHUDOPHDVXUHVUHODWLQJWRWKH I  &\EHUFULPHDQGLQIRUPDWLRQVHFXULW\ PDQDJHPHQW RI LQIRUPDWLRQ FRQFHUQLQJ FRQVXPHUVp $FW 1R  GHƄQHV DV DQ RIIHQFH WKH DOWHUDWLRQ RU FUHGLWKLVWRU\ DGXOWHUDWLRQRIWHFKQRORJLFDOO\VWRUHGGRFXPHQWVDV G  ,QGXVWULDODQGLQWHOOHFWXDOSURSHUW\ ZHOO DV WKH LPSURSHU GLVFORVXUH RI WKH WHFKQRORJLFDO LQIRUPDWLRQ VWRUHG 7KH &ULPLQDO &RGH $FW 1R   )ROORZLQJ UDWLƄFDWLRQ RI WKH 8QLWHG 6WDWHV3DQDPD GHƄQHV D QXPEHU RI RIIHQFHV LQYROYLQJ LOOLFLW DFFHVV 7UDGH3URPRWLRQ$JUHHPHQW$FW1RRI0D\ to computer systems, as well as the interception of  ZDV DPHQGHG E\ $FW 1R  RI  2FWR electronic communications, with harsher penalties EHUWRDOORZIRUWKHXVHRIHOHFWURQLFPHGLDLQ LQ FDVHV LQYROYLQJ GDWD FRQWDLQHG LQ GDWDEDVHV RU VXEPLWWLQJ DSSOLFDWLRQV IRU WUDGHPDUNV SDWHQWV DQG FRPSXWHUV\VWHPVRI L JRYHUQPHQWRIƄFHV LL SXE LQGXVWULDOPRGHOVWRWKH'LUHFWRUDWH*HQHUDORIWKH,Q OLFSULYDWHRUPL[HGLQVWLWXWLRQVWKDWSURYLGHDSXEOLF GXVWULDO3URSHUW\5HJLVWU\ VHUYLFHDQG LLL EDQNVLQVXUDQFHFRPSDQLHVRURWKHU 3DQDPDKDVVLJQHGWKHIROORZLQJWUHDWLHV ƄQDQFLDORUVHFXULWLHVLQVWLWXWLRQV,WDOVRVDQFWLRQVLO • LQWHUQDWLRQDO WUHDWLHV DGPLQLVWHUHG E\ :,32 LQ licit disclosure of industrial secrets and unauthorized FOXGLQJ WKH 3DWHQW &RRSHUDWLRQ 7UHDW\ DQG WKH UHSURGXFWLRQRIZRUNVWKDWDUHSURWHFWHGE\FRS\ULJKW 7UDGHPDUN/DZ7UHDW\ DQGUHODWHGULJKWV 52 Study on the harmonization of cyberlegislation in Latin America

8QGHU $FW 1R  RI  2FWREHU  3DQDPD (OHFWURQLF )LOHV $FW 1R   RI  'HFHPEHU UDWLƄHG WKH &RXQFLO RI (XURSHp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ƄOPHQW provides for providers of intermediation services, data RIWKHFRXQWU\pVREOLJDWLRQVXQGHUWKH&RXQFLORI(X VWRUDJH OLQNV DQG WHPSRUDU\ FRSLHV WR EH H[HPSW URSHpV&RQYHQWLRQRQ&\EHUFULPH IURP OLDELOLW\ ,W HVWDEOLVKHV LQIRUPDWLRQ UHTXLUHPHQWV WKDWPXVWEHPHWE\ZHEVLWHVDQGUHFRJQL]HVWKHOHJDO 7KH'LUHFWRUDWH*HQHUDOIRUH&RPPHUFHRIWKH0LQ validity of contracts concluded by electronic means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ƄFH GLJLWDO VLJQDWXUHV GDWD PHVVDJHV DQG HOHFWURQLF RIWKH3UHVLGHQWRIWKH5HSXEOLFRI3DUDJXD\2QHRI ƄOHV DQG UHJXODWHV WKHLU XVH ,W DOVR UHJXODWHV FHUWL WKHPHDVXUHVSURSRVHGLQWKH0DVWHU3ODQIRUFORVLQJ ƄFDWLRQ FRPSDQLHV DQG DXWKRUL]HV WKHLU RSHUDWLRQV WKHGLJLWDOJDSLVDVWUDWHJ\IRUSURPRWLQJHFRPPHUFH DQGWKHSURYLVLRQRIFHUWLƄFDWLRQVHUYLFHV,WPDNHVD DPRQJ GLIIHUHQW DFWRUV LQ WKH HFRQRP\ %HDULQJ LQ GLVWLQFWLRQ EHWZHHQ HOHFWURQLF VLJQDWXUHV DQG GLJLWDO PLQGWKH0DVWHU3ODQWKH1DWLRQDO&RQJUHVVDGRSWHG VLJQDWXUHVFRQIHUULQJRQWKHPGLIIHUHQWOHJDOHIIHFWV WKHH&RPPHUFH$FW $FW1R RI0DUFK DQGUHFRJQL]HVWKHIXQFWLRQDOHTXLYDOHQFHRISULQWHG  ZKLFK LV WKH PDLQ OHJLVODWLRQ RQ WKH VXEMHFW documents with respect to documents contained in DORQJZLWKWKH$FWRQWKH/HJDO9DOLGLW\RI(OHFWURQLF GDWDPHVVDJHVDVZHOODVEHWZHHQKDQGZULWWHQVLJ 6LJQDWXUHV 'LJLWDO 6LJQDWXUHV 'DWD 0HVVDJHV DQG QDWXUHVDQGGLJLWDOVLJQDWXUHVSURYLGHGWKHODWWHUKDYH II. REPORT ON LEGISLATION IN THE LATIN AMERICAN COUNTRIES 53

EHHQFHUWLƄHGE\DSURYLGHURIVHUYLFHVWKDWLVOLFHQVHG LQWRWKHOHJLVODWLRQRI6WDWHVSDUWLHVLQRUGHUWREHDS E\ WKH 0LQLVWU\ RI ,QGXVWU\ DQG &RPPHUFH ,W DOVR SOLFDEOHWRWKHUHOHYDQWDVSHFWVRIWKHRUJDQL]DWLRQRU HPSRZHUV WKH *RYHUQPHQW WR FDUU\ RXW DGPLQLVWUD RSHUDWLRQRI0(5&26853DUDJXD\KDVDOVRVLJQHG WLYHSURFHGXUHVWKURXJKHOHFWURQLFPHDQVDQGWRXVH 0(5&2685 UHVROXWLRQ  UHFRJQL]LQJ WKH OHJDO HOHFWURQLFƄOHVDQGGLJLWDOVLJQDWXUHVLQLWVDFWLRQV YDOLGLW\RIHOHFWURQLFGRFXPHQWVHOHFWURQLFVLJQDWXUHV DQG DGYDQFHG HOHFWURQLF VLJQDWXUHV KRZHYHU WKLV 7KHUHJXODWLRQVWRWKH$FWZHUHLVVXHGE\([HFXWLYH resolution has not been incorporated into the coun 'HFUHH1R7KHVFRSHRIWKH$FWZDVH[ WU\pVVXEVWDQWLYHODZ WHQGHG E\ $FW 1R  RI  0D\  ZKLFK SDUWLDOO\DPHQGVLWLQUHJDUGWRWKHVFRSHRIDSSOLFD E  &RQVXPHUSURWHFWLRQ WLRQRIHOHFWURQLFƄOHVDQGE\WKHGHVLJQDWLRQRIWKH 0LQLVWU\RI,QGXVWU\DQG&RPPHUFHDVWKHLPSOHPHQ ,QWKHDUHDRIFRQVXPHUSURWHFWLRQWKH&RQVXPHUDQG WDWLRQDXWKRULW\ 8VHU3URWHFWLRQ$FW $FW1R RI2FWREHU HVWDEOLVKHVUXOHVWRSURWHFWFRQVXPHUVpGLJQLW\ ,QWKHDGPLQLVWUDWLYHVSKHUHWKH3XEOLF3URFXUHPHQW KHDOWKVDIHW\DQGHFRQRPLFLQWHUHVWV7KHULJKWVGH $FW $FW 1R  RI  'HFHPEHU  DV ƄQHGLQWKLVODZDUHQRWVXEMHFWWRZDLYHUWUDQVDFWLRQ DPHQGHGE\$FW1RRI'HFHPEHU or conventional limitation by consumers and over HVWDEOLVKHGWKH3XEOLF6HFWRU3URFXUHPHQW6\VWHPWR ULGH DQ\ OHJDO SURYLVLRQ XVDJH FXVWRP SUDFWLFH RU UHJXODWHSODQQLQJSURJUDPPLQJEXGJHWLQJFRQWUDFW VWLSXODWLRQWRWKHFRQWUDU\7KH$FWJRYHUQVDOOWUDQV LQJH[HFXWLRQVSHQGLQJDQGPRQLWRULQJRIFRQWUDFWLQJ actions between providers and consumers for the DQGVXEFRQWUDFWLQJIRUDOOW\SHVRIJRRGVFRQWUDFWLQJ distribution, sale, purchase or other form of commer RIVHUYLFHVLQJHQHUDOFRQVXOWDQWVHUYLFHVDQGSXEOLF FLDO WUDQVDFWLRQ LQYROYLQJ JRRGV DQG VHUYLFHV ,Q WKH ZRUNV DQG UHODWHG VHUYLFHV LQ DGGLWLRQ WR UHJXODWLQJ WHOHFRPPXQLFDWLRQVUHDOP$FWH[SDQGVWKH WKHFHUWLƄFDWLRQRIHOHFWURQLFPHDQVRILGHQWLƄFDWLRQIRU VFRSH RI $FW  DGGLQJ D VSHFLDO FKDSWHU RQ SXEOLFVHFWRUFRQWUDFWLQJ telecommunications services, the principal elements RIZKLFKLQFOXGHWKHREOLJDWLRQWRSURYLGHLQIRUPDWLRQ $VUHJDUGVWKHXVHRIHOHFWURQLFPHDQVLQJRYHUQPHQW that permits consumers to identify providers and the DGPLQLVWUDWLRQWKH$GPLQLVWUDWLYH5HRUJDQL]DWLRQDQG REOLJDWLRQWRIXUQLVKWUDQVSDUHQWELOOLQJLQIRUPDWLRQ 7D[5HIRUP$FW $FW1R RI-XQH UHTXLUHV WKH 2IƄFH RI WKH 'HSXW\ 6HFUHWDU\ RI 7D[D 7KH H&RPPHUFH $FW $FW 1R   RI  )HE WLRQWRPDLQWDLQDQGUHJXODUO\XSGDWHDZHESDJHWR UXDU\  DOVR HVWDEOLVKHV WKH IROORZLQJ ULJKWV IRU LQIRUP WD[SD\HUV DERXW LWV VHUYLFHV DQG DERXW WKHLU FRQVXPHUV L  WR REMHFW WR WKH XVH RI WKHLU GDWD IRU WD[ REOLJDWLRQV 7KH 7D[ $GPLQLVWUDWLRQ FXUUHQWO\ DO SURPRWLRQDO SXUSRVHV LL  WR RSW RXW RI FRPPHUFLDO ORZVWD[SD\HUVWRVXEPLWVZRUQVWDWHPHQWVRQOLQHRU WUDQVDFWLRQVZLWKLQƄYHGD\VDIWHUUHFHLYLQJWKHSURG WRSULQWWKHIRUPIRUWKH6LQJOH5HJLVWU\RI7D[SD\HUV XFWRUVHUYLFHVLPSO\E\HOHFWURQLFQRWLƄFDWLRQRIWKHLU 7KH &XVWRPV &RGH $FW 1R   RI  -XQH GHFLVLRQ LLL  WR REWDLQ FRPSOHWH DQG WUXWKIXO LQIRU  LQFRUSRUDWHV WKH XVH RI FRPSXWHU V\VWHPV PDWLRQ RQ SURGXFWV DQG VHUYLFHV LY  WR UHFHLYH WKH LQIRUPDWLRQWHFKQRORJLHVDQGDXWRPDWLRQLQFXVWRPV product or service purchased within the time, of the WUDQVDFWLRQV LQ RUGHU WR VLPSOLI\ SURFHGXUHV ,W DOVR TXDOLW\DQGLQWKHTXDQWLW\DJUHHGXSRQDQG Y WRUH DOORZV WKH KDQGZULWWHQ VLJQDWXUHV UHTXLUHG E\ WKH FHLYHUHLPEXUVHPHQWZKHQPHUFKDQGLVHLVUHWXUQHG National Customs Service to be replaced by proper 7KHUHJXODWLRQVWRWKHH&RPPHUFH$FWUHTXLUHRQOLQH SDVVZRUGVRUVLJQRQVRUE\HOHFWURQLFVLJQDWXUHVDV SURYLGHUVRIJRRGVDQGVHUYLFHVWRSURYLGHFRQVXPHUV DPHDQVRIVXEVWDQWLDWLQJDGPLQLVWUDWLYHSURFHGXUHV or users, in a transparent, clear and simple manner, in FDUULHG RXW GLJLWDOO\ 7KH &XVWRPV &RGH UHFRJQL]HV formation about the security of the means of payment SDVVZRUGVDQGHOHFWURQLFVLJQDWXUHVDVEHLQJHTXLYD XVHG DQG WKH WHFKQRORJ\ XVHG WR SURWHFW WUDQVPLV OHQW WR KDQGZULWWHQ VLJQDWXUHV IRU DOO OHJDO SXUSRVHV VLRQVSURFHVVLQJRUVWRUDJHRIWKHLUƄQDQFLDOGDWD DQGUHJXODWHVWKHXVHRIHOHFWURQLFƄOHV 2I QRWH DW WKH LQWHUQDWLRQDO OHYHO LV WKH 6DQWD 0DUÊD 7KH 5HSXEOLF RI 3DUDJXD\ KDV VLJQHG EXW QRW \HW 3URWRFROUDWLƄHGE\3DUDJXD\YLD$FW1RRI-XO\ UDWLƄHGWKH8QLWHG1DWLRQV&RQYHQWLRQRQWKH8VHRI ZKLFKUHFRJQL]HVWKHMXULVGLFWLRQRIWKHFRXUWV (OHFWURQLF&RPPXQLFDWLRQVLQ,QWHUQDWLRQDO&RQWUDFWV RIWKH6WDWHLQZKLFKDFRQVXPHULVGRPLFLOHG$OVR  3DUDJXD\KDVVLJQHG0(5&2685UHVROXWLRQ ZRUWKPHQWLRQLQJDUH0(5&2685UHVROXWLRQ  DGRSWLQJ WKH *XLGHOLQHV IRU $JUHHPHQWV RQ RQ FRQVXPHUVp ULJKW WR LQIRUPDWLRQ LQ FRPPHUFLDO 0XWXDO 5HFRJQLWLRQ RI $GYDQFHG (OHFWURQLF 6LJQD WUDQVDFWLRQV PDGH YLD WKH ,QWHUQHW DQG 0(5&2 WXUHVWKLVUHVROXWLRQGRHVQRWQHHGWREHLQFRUSRUDWHG 685 UHVROXWLRQ  RQ FRQVXPHU SURWHFWLRQ DQG 54 Study on the harmonization of cyberlegislation in Latin America

PLVOHDGLQJ DGYHUWLVLQJ 3DUDJXD\ KDV VLJQHG ERWK RUXVHUVDQGWKH\PXVWREWDLQWKHH[SUHVVFRQVHQWRI resolutions, but has not yet incorporated them into its FRQVXPHUVWRSURFHVVWKHLUSHUVRQDOGDWD GRPHVWLFVXEVWDQWLYHODZ G  ,QGXVWULDODQGLQWHOOHFWXDOSURSHUW\ F  3URWHFWLRQRISHUVRQDOGDWD ,Q WKH DUHD RI LQWHOOHFWXDO SURSHUW\ ULJKWV WKH 3DUD 7KH3DUDJXD\DQ&RQVWLWXWLRQUHFRJQL]HVSULYDF\DQG JXD\DQ &RQVWLWXWLRQ JXDUDQWHHV DXWKRUV LQYHQWRUV SURWHFWLRQRISHUVRQDOGDWDDVIXQGDPHQWDOULJKWVLQ SURGXFHUVDQGPHUFKDQWVH[FOXVLYHRZQHUVKLSRIWKHLU DFFRUGDQFHZLWKWKH6DQ-RVÆ3DFWZKLFKJXDUDQWHHV ZRUNVDQGLQYHQWLRQVXQGHUWKHODZVRPHRIWKHPDLQ WKHULJKWWRSHUVRQDODQGIDPLO\FRQƄGHQWLDOLW\UHVSHFW ODZV RQ WKH PDWWHU DUH WKH &RS\ULJKW DQG 5HODWHG IRULQGLYLGXDOSULYDF\DQGGLJQLW\DQGWRDSHUVRQpVSUL 5LJKWV$FW $FW1R RI$XJXVWWKH YDWHLPDJH7KH&RQVWLWXWLRQDOVRUHFRJQL]HVKDEHDV 7UDGHPDUNV$FW $FW1R RI-XQH GDWDDVDIXQGDPHQWDOULJKWHQWLWOLQJDOOSHUVRQVWRKDYH WKH 3DWHQW $FW $FW 1R   RI  1RYHPEHU access to any information and data on themselves or  DV DPHQGHG E\ $FW 1R  RI  'H WKHLUDVVHWVFRQWDLQHGLQJRYHUQPHQWUHFRUGVRULQSUL FHPEHU$FW1RRI-XQHWKH YDWH UHFRUGV RI D SXEOLF QDWXUH DQG HVWDEOLVKLQJ WKH ,QGXVWULDO'HVLJQVDQG0RGHOV$FW $FW1R  ULJKWWREHDSSULVHGRIWKHXVHDQGSXUSRVHRIVXFK RI1RYHPEHU$FW1RDSSURYLQJWKH LQIRUPDWLRQ :,32&RS\ULJKW7UHDW\DGRSWHGRQ2FWREHU DQG$FW1RDSSURYLQJWKH:,323HUIRUPDQFHV Habeas dataJLYHVWKHGDWDVXEMHFWWKHULJKWWRUHTXHVW DQG3KRQRJUDPV7UHDW\DGRSWHGRQ2FWREHU XSGDWLQJFRUUHFWLRQRUUHPRYDORIHUURQHRXVGDWDRU 3DUDJXD\ KDV DOVR UDWLƄHG WKH 3DULV &RQYHQWLRQ DQG RI GDWD WKDW LOOHJLWLPDWHO\ MHRSDUGL]H KLV RU KHU ULJKWV WKH%HUQH&RQYHQWLRQ ,QDGGLWLRQ$FW1RUHJXODWLQJLQIRUPDWLRQ RI D SULYDWH QDWXUH ZKLFK ZDV DGRSWHG RQ  'H H  'RPDLQQDPHV FHPEHUDQGDPHQGHGE\$FW1RRI $V UHJDUGV GRPDLQ QDPHV 1,&3< LV WKH HQWLW\ 6HSWHPEHUOD\VGRZQUXOHVRQWKHVWRUDJHFRO UHVSRQVLEOHIRUDGPLQLVWHULQJGRPDLQQDPHVLWLVRS OHFWLRQSURFHVVLQJDQGSXEOLFDWLRQRIGDWDRIDSULYDWH HUDWHGE\WKH&DWKROLF8QLYHUVLW\pV'LJLWDO(OHFWURQLFV QDWXUH7KH$FWLVJHQHUDOLQVFRSHDQGQRWOLPLWHGWR /DERUDWRU\DQGWKH1DWLRQDO&RPSXWHU&HQWUHDWWKH HOHFWURQLFGDWDEDVHV,WDXWKRUL]HVWKHSXEOLFDWLRQDQG 1DWLRQDO 8QLYHUVLW\ RI $VXQFLÐQ 7KHUH LV QR OHJLVOD GLVVHPLQDWLRQRIGDWDFRQVLVWLQJRIDSHUVRQpVƄUVWDQG WLRQRQWKHOHJDOQDWXUHRIGRPDLQQDPHVZKLFKDUH ODVWQDPHVLGHQWLW\GRFXPHQWGRPLFLOHDJHGDWHDQG VXEMHFW WR WKH DGPLQLVWUDWLYH UHJXODWLRQV RI 1,&3< place of birth, marital status, occupation or profession, 1,&3<VHUYHVDVFRRUGLQDWRURIWKHGRPDLQQDPHV SODFHRIZRUNDQGZRUNWHOHSKRQHQXPEHUZKLFKDUH V\VWHP EXW KDV QR MXULVGLFWLRQDO DXWKRULW\ DQG GRHV FRQVLGHUHGWREHSXEOLFSHUVRQDOGDWD not act as a mediator or arbitrator or intervene in dis $FW 1R  VWLSXODWHV WKDW SURYLGHUV PD\ QRW SXWHVRYHUGRPDLQQDPHV'LVSXWHVWKDWDUHVHWWOHG MHRSDUGL]HWKHSURWHFWLRQRISHUVRQDOGDWDDQGWKHULJKW RXWRIFRXUWDUHVXEMHFWWRWKH$UELWUDWLRQDQG0HGLD to personal and family privacy of the parties or of third WLRQ$FW $FW1R  SDUWLHV ZKR DUH LQYROYHG ,W DOVR UHTXLUHV WKDW ZKHQ I  &\EHUFULPHDQGLQIRUPDWLRQVHFXULW\ SURYLGHUVRIJRRGVDQGVHUYLFHVXVHGDWDVWRUDJHDQG recovery devices on terminals, they must inform con $FW1RRI2FWREHUZKLFKDPHQGVDQG sumers or users fully and clearly about the use and H[SDQGVVHYHUDODUWLFOHVRIWKH&ULPLQDO&RGH $FW1R purpose of such devices and offer them the option of   DGGHG WKH IROORZLQJ F\EHUFULPHV L  FKLOG UHIXVLQJWKHXVHRIWKHLUGDWDWKLVRSWLRQLVWREHPDGH SRUQRJUDSK\ LL  LPSURSHU DFFHVV WR GDWD LLL  LQWHU DYDLODEOHIUHHRIFKDUJHXVLQJDVLPSOHSURFHGXUH FHSWLRQRIGDWD LY SUHSDUDWLRQIRULPSURSHUDFFHVV WRDQGLQWHUFHSWLRQRIGDWD Y LPSURSHUDFFHVVWR,7 7KH$FWVWLSXODWHVWKDWSURYLGHUVZKRRIIHUJRRGVDQG V\VWHPV YL  VDERWDJH RI ,7 V\VWHPV YLL  PLVDSSUR services online must inform consumers or users of the SULDWLRQ RI IXQGV YLD ,7 V\VWHPV DQG YLLL  IRUJHU\ RI purpose and treatment of their personal data, in ac debit or credit cards and other electronic means of FRUGDQFHZLWKWKHUHOHYDQWOHJLVODWLRQWKDWLVLQIRUFHDW SD\PHQW WKHWLPH7KH\PXVWDOVRSURYLGHWKLVLQIRUPDWLRQWRWKH recipients of the data supplied and to those responsible ,QWKH&(573<FRPSXWHUHPHUJHQF\UHVSRQVHV IRUNHHSLQJRUVWRULQJWKHLQIRUPDWLRQSURYLGHG3URYLG WHDPZDVVHWXSZLWKLQWKH1DWLRQDO6HFUHWDULDWIRU,Q HUVRIJRRGVDQGVHUYLFHVPXVWXVHVHFXUHV\VWHPV IRUPDWLRQDQG&RPPXQLFDWLRQ7HFKQRORJ\WRIDFLOLWDWH to prevent loss, alteration and access by unauthor DQG FRRUGLQDWH SURWHFWLRQ RI ,&7 V\VWHPV WKDW VXS ized third parties to the data supplied by consumers SRUWWKHQDWLRQDODQGJRYHUQPHQWLQIUDVWUXFWXUHDQGWR II. REPORT ON LEGISLATION IN THE LATIN AMERICAN COUNTRIES 55

JXDUDQWHHHIIHFWLYHDQGWLPHO\UHVSRQVHVWRFRPSXWHU D  (OHFWURQLFWUDQVDFWLRQVHOHFWURQLFVLJQDWXUHV VHFXULW\LQFLGHQWV $FW1RDPHQGLQJWKH&LYLO&RGHSURYLGHVWKDW J  3HQGLQJOHJLVODWLRQDQGFKDOOHQJHV ZKHQWKHODZUHTXLUHVDSDUWLFXODUSURFHGXUHRUVLJQD WXUHWRHVWDEOLVKDSDUW\pVZLOOWKHUHTXLUHPHQWPD\EH 3DUDJXD\IDFHVWKHFKDOOHQJHRIFDWFKLQJXSWRRWKHU VDWLVƄHGYLDHOHFWURQLFRSWLFDORUDQ\VLPLODUPHDQV FRXQWULHV LQ WKH UHJLRQ 7R DGGUHVV WKH GLJLWDO JDS DQG WKDW IRU WKH SXUSRVH RI FRQWUDFWV H[HFXWHG UH LW QHHGV WR LPSURYH DFFHVV WR WKH ,QWHUQHW VR DV WR motely, offers, withdrawals, acceptances and all other HQVXUHWKDWLWZLOOEHPRUHLQFOXVLYHDQGGHYHORSPHQW contractual statements are considered to have been RULHQWHG7KHFULPLQDOSURFHGXUDOOHJLVODWLRQQHHGVWR FRPPXQLFDWHG ZKHQ WKH\ DUULYH DW WKH DGGUHVVHHpV EHEURXJKWXSWRGDWHLQRUGHUWRVWUHQJWKHQWKH6WDWHpV DGGUHVV,IWKH\DUHWUDQVPLWWHGE\HOHFWURQLFRSWLFDO FDSDFLWLHVWRFRPEDWF\EHUFULPH7KHOHJDOIUDPHZRUN or other similar means, they are presumed to have for data protection also needs to be updated in order EHHQUHFHLYHGXSRQUHFHLSWRIDFRQƄUPDWLRQRIGH WRFRPSO\ZLWKWKHFRPPLWPHQWVXQGHUWDNHQE\3DUD OLYHU\ JXD\LQWKH,EHUR$PHULFDQ'DWD3URWHFWLRQ1HWZRUN 7KH 'LJLWDO 6LJQDWXUHV DQG &HUWLƄFDWHV $FW $FW 1R PERU  RIDUWLFOHRIZKLFKZDVDPHQGHGE\ $FW1RHVWDEOLVKHVJHQHUDOJXLGHOLQHVUHJDUG 7KH'HYHORSPHQW3ODQIRUWKH,QIRUPDWLRQ6RFLHW\LQ LQJGLJLWDOVLJQDWXUHVDQGGLJLWDOFHUWLƄFDWHVDVZHOODV 3HUXt'LJLWDO$JHQGDLVVXHGE\6XSUHPH'HFUHH HVWDEOLVKLQJWKHDXWKRULW\RIWKHUHOHYDQWJRYHUQPHQW 1R3&0RI-XO\LQFOXGHVDVWUDWHJ\ HQWLWLHV DQG WKH W\SHV RI DFWLRQ WR EH WDNHQ E\ FHU IRUWKHGHYHORSPHQWRIHFRPPHUFHXQGHUREMHFWLYH WLƄFDWLRQ UHJLVWUDWLRQ DQG YHULƄFDWLRQ HQWLWLHV 8QGHU LHqWRLQFUHDVHSURGXFWLYLW\DQGFRPSHWLWLYHQHVV WKLVOHJLVODWLRQGLJLWDOVLJQDWXUHVKDYHWKHVDPHIRUFH WKURXJK LQQRYDWLRQ LQ WKH SURGXFWLRQ RI JRRGV DQG DQGOHJDOYDOLGLW\DVKDQGZULWWHQVLJQDWXUHVRUVLPLODU VHUYLFHVE\GHYHORSLQJDQGDSSO\LQJ,&7Vr,QDGGL H[SUHVVLRQV RI D SDUW\pVZLOO ,W DOVR UHFRJQL]HV FHU WLRQ WKH 1DWLRQDO H*RYHUQPHQW 3ROLF\  WLƄFDWHVRIGLJLWDOVLJQDWXUHLVVXHGE\IRUHLJQHQWLWLHV DGRSWHGWKURXJK6XSUHPH'HFUHH1RWKH SURYLGHGVXFKFHUWLƄFDWHVDUHUHFRJQL]HGE\WKHFRP $FWRQ3URPRWLRQRI%URDGEDQGDQG&RQVWUXFWLRQRI SHWHQWDGPLQLVWUDWLYHDXWKRULW\ WKH1DWLRQDO)LEUH2SWLF%DFNERQH $FW1R  RI-XO\DQGWKHUHJXODWLRQVWKHUHWRRI1R 7KH UHJXODWLRQV WR WKH 'LJLWDO 6LJQDWXUHV DQG &HU YHPEHUDVZHOODV/HJLVODWLYH'HFUHH1R WLƄFDWHV $FW 6XSUHPH 'HFUHH 1R 3&0  DGRSWLQJ WKH $FW RQ 2UJDQL]DWLRQ DQG 'XWLHV RI WKH LVVXHGE\WKH2IƄFHRIWKH3UHVLGHQWRIWKH&RXQFLORI 1DWLRQDO,QVWLWXWHRI6WDWLVWLFVDQG,QIRUPDWLFVRI 0LQLVWHUVUHƅHFWVVRPHRIWKHSURYLVLRQVRIWKH81 $SULODUHDOOPHDVXUHVGHVLJQHGWRVWUHQJWKHQ &,75$/0RGHO/DZRQ(OHFWURQLF6LJQDWXUHV7KH$FW WKHHQYLURQPHQWIRUPDNLQJHFRPPHUFHYLDEOH ZDVGHVLJQHGWRUHJXODWHWKHXVHRIHOHFWURQLFVLJQD WXUHVDQGWKHUHJLPHJRYHUQLQJWKH2IƄFLDO(OHFWURQLF 6RPH RI WKH PDLQ ODZV JRYHUQLQJ HFRPPHUFH DUH 6LJQDWXUH,QIUDVWUXFWXUHLQERWKWKHSXEOLFDQGSULYDWH $FW1RRI-XQHDPHQGLQJWKH&LYLO VHFWRUV7KHUHJXODWLRQVGHVLJQDWHWKH1DWLRQDO,QVWL &RGHWKH'LJLWDO6LJQDWXUHVDQG&HUWLƄFDWHV$FW $FW WXWHIRUWKH3URWHFWLRQRI&RPSHWLWLRQDQG,QWHOOHFWXDO 1R RI0D\DVDPHQGHGE\$FW1R 3URSHUW\5LJKWVDVWKHOHDGDGPLQLVWUDWLYHDJHQF\DQG  DQG WKH UHJXODWLRQV WR WKH 'LJLWDO 6LJQDWXUHV DVVLJQ WR WKH 1DWLRQDO 5HJLVWU\ RI ,GHQWLƄFDWLRQ DQG DQG &HUWLƄFDWHV $FW FRQWDLQHG LQ 6XSUHPH 'HFUHH &LYLO6WDWXVWKHUROHVRI1DWLRQDO&HUWLƄFDWLRQ(QWLW\IRU 1R3&0RI-XO\ WKH3HUXYLDQ6WDWH&HUWLƄFDWLRQ(QWLW\IRUWKH3HUXYLDQ 6WDWHDQG5HJLVWU\RU9HULƄFDWLRQ(QWLW\IRUWKH3HUX 7KH2IƄFHRIWKH3UHVLGHQWRIWKH&RXQFLORI0LQLVWHUV YLDQ6WDWH ZRUNLQJWKURXJKWKH1DWLRQDO2IƄFHIRUH*RYHUQPHQW DQG ,QIRUPDWLFV HQFRXUDJHV SXEOLF DJHQFLHV WR XVH 7KH UHJXODWLRQV JLYH GLJLWDO VLJQDWXUHV JHQHUDWHG ,&7VLQSURYLGLQJWKHLUVHUYLFHVDQGWRKROGVHPLQDUV ZLWKLQ WKH 2IƄFLDO (OHFWURQLF 6LJQDWXUH ,QIUDVWUXFWXUH RQWKHVXEMHFWRIHJRYHUQPHQWDQGWKHLQIRUPDWLRQ WKHVDPHYDOLGLW\DQGOHJDOIRUFHDVKDQGZULWWHQVLJ VRFLHW\ 7KH LGHD LV WR WUDLQ SXEOLF RIƄFLDOV LQ DUHDV QDWXUHV 7KH\ DOVR PDNH GLJLWDOO\ VLJQHG HOHFWURQLF VXFKDVWKHOHJDOIUDPHZRUNIRUHJRYHUQPHQWRSHQ GRFXPHQWVLQWKDWIUDPHZRUNDGPLVVLEOHDVHYLGHQFH JRYHUQPHQW,&7VWDWLVWLFVLQWKH6WDWHWKHLQIRUPD LQ MXGLFLDO RU DGPLQLVWUDWLYH SURFHHGLQJV 7KH 2IƄFLDO WLRQ VRFLHW\ DQG LQFOXVLRQ DQG GLJLWDO FLWL]HQVKLS IRU (OHFWURQLF6LJQDWXUH,QIUDVWUXFWXUHLVDUHOLDEOHDFFUHG modernization of the State and improvement of public LWHGV\VWHPUHJXODWHGDQGVXSHUYLVHGE\WKHUHOHYDQW PDQDJHPHQW DGPLQLVWUDWLYHHQWLW\DQGKDVWKHQHFHVVDU\OHJDODQG 56 Study on the harmonization of cyberlegislation in Latin America

WHFKQLFDO WRROV IRU JHQHUDWLQJ GLJLWDO VLJQDWXUHV DQG $W SUHVHQW WKH 6WDWH (OHFWURQLF &RQWUDFWLQJ 6\VWHP SURYLGLQJYDULRXVOHYHOVRIVHFXULW\WRHQVXUHWKHLQWHJ ZZZVHDFHJRESH DOORZVIRUWKHH[FKDQJHDQGGLV rity of electronic documents and the identity of their VHPLQDWLRQRILQIRUPDWLRQRQJRYHUQPHQWSURFXUHPHQW DXWKRUV DQGFRQWUDFWLQJDVZHOODVIRUHOHFWURQLFWUDQVDFWLRQV

6XSUHPH 'HFUHH 1R 3&0 RI  -XO\ 8QGHU WKH UHJXODWLRQV WR WKH 'LJLWDO 6LJQDWXUHV DQG  DPHQGLQJ WKH UHJXODWLRQV WR WKH 'LJLWDO 6LJ &HUWLƄFDWHV$FWWKH1DWLRQDO2IƄFHIRUH*RYHUQPHQW QDWXUHV DQG &HUWLƄFDWHV $FW $FW 1R   DQG DQG ,QIRUPDWLFV KDV WKH DXWKRULW\ WR VXSHUYLVH JRY OD\LQJGRZQUXOHVIRUUHJLVWU\SURFHGXUHVFDUULHGRXW HUQPHQW DJHQFLHVp SODQV IRU WKH LPSOHPHQWDWLRQ RI XQGHU/HJLVODWLYH'HFUHH1RDQGVXSSOHPHQWDO administrative procedures and formalities by secure SURYLVLRQV PRGLƄHV WKH UHTXLUHPHQWV UHODWLQJ WR WKH HOHFWURQLFPHDQV FRQWHQWDQGGXUDWLRQRIGLJLWDOFHUWLƄFDWHVIRULQGLYLGX ,QUHJDUGWRWD[HVWKH7D[&RGH 6XSUHPH'HFUHH1R DOVDQGOHJDOHQWLWLHVDQGUHFRJQL]HVWKHDXWKRULW\RI  RI  $XJXVW   DV DPHQGHG E\ /HJLV WKH1DWLRQDO,QVWLWXWHIRUWKH3URWHFWLRQRI&RPSHWLWLRQ ODWLYH'HFUHH1RRI)HEUXDU\SURYLGHV DQG,QWHOOHFWXDO3URSHUW\5LJKWVWRDFWDVFRPSHWHQW IRUWKH7D[$GPLQLVWUDWLRQWRDXWKRUL]HWKHVXEPLVVLRQ DGPLQLVWUDWLYHDXWKRULW\IRUWKH2IƄFLDO(OHFWURQLF6LJ RIWD[UHWXUQVWKURXJKPDJQHWLFPHGLDID[HOHFWURQLF QDWXUH,QIUDVWUXFWXUH transfer or any medium that meets the conditions es WDEOLVKHGE\WKH2IƄFHRIWKH1DWLRQDO6XSHULQWHQGHQW 6XSUHPH'HFUHH1R3&0RI2FWREHU RI&XVWRPVDQG7D[$GPLQLVWUDWLRQ2QWKDWEDVLVWKH  HVWDEOLVKHV SURYLVLRQV IRU IDFLOLWDWLQJ LPSOH 2IƄFHRIWKH1DWLRQDO6XSHULQWHQGHQWRI&XVWRPVDQG PHQWDWLRQRIGLJLWDOVLJQDWXUHVDQGDPHQGV6XSUHPH 7D[$GPLQLVWUDWLRQKDVGHYHORSHGWHOHPDWLFSURJUDPV 'HFUHH 1R 3&0 RQ UHJXODWLRQV WR WKH IRUƄOLQJWD[UHWXUQV 'LJLWDO6LJQDWXUHVDQG&HUWLƄFDWHV$FW7KHGH FUHHDOORZVIRULQGLYLGXDOVDQGOHJDOHQWLWLHVWRXVHD 7KH*HQHUDO&XVWRPV$FW 'HFUHH1RRI$SULO GLJLWDO FHUWLƄFDWH LVVXHG E\ SURYLGHUV KROGLQJ D :HE   DQG WKH UHJXODWLRQV WKHUHWR DGRSWHG E\ 6X 7UXVWLQWHUQDWLRQDOFHUWLƄFDWLRQXQWLOVXFKWLPHDVWKH\ SUHPH'HFUHH1R()RI-DQXDU\ REWDLQ WKH GLJLWDO FHUWLƄFDWH IURP WKH 1DWLRQDO ,QVWL JRYHUQV FXVWRPV DFWLYLWLHV LQYROYLQJ SHUVRQV JRRGV WXWHIRUWKH3URWHFWLRQRI&RPSHWLWLRQDQG,QWHOOHFWXDO DQGPRGHVRIWUDQVSRUWFURVVLQJERUGHUVDWFXVWRPV 3URSHUW\5LJKWV SRLQWVDQGJLYHVWKH&XVWRPV6HUYLFHWKHDXWKRULW\WR LVVXHUXOHVDQGHVWDEOLVKSURFHGXUHVIRUWKHLVVXLQJ The National Supervisory Commission for Companies WUDQVIHUULQJXVLQJDQGPRQLWRULQJLQIRUPDWLRQWKURXJK DQG 6HFXULWLHV LVVXHG LWV 'HFLVLRQ 1R  RI GRFXPHQWDU\ PDJQHWLF RU HOHFWURQLF PHDQV LQ RU  )HEUXDU\  DSSURYLQJ WKH UHJXODWLRQV WR WKH der to promote development and facilitate customs 3HUXYLDQ 6HFXULWLHV 0DUNHW 1HWZRUN JRYHUQLQJ WKH DFWLYLWLHV7KH0LQLVWU\RI)RUHLJQ7UDGHDQG7RXULVP WUDQVPLVVLRQ DQG H[FKDQJH RI GRFXPHQWV DQG LQ LV UHVSRQVLEOH IRU GHYHORSLQJ WKH 6LQJOH :LQGRZ IRU IRUPDWLRQ WKURXJK WKH 3HUXYLDQ 6HFXULWLHV 0DUNHW )RUHLJQ7UDGHFUHDWHGE\6XSUHPH'HFUHH1R 1HWZRUN XVLQJ SXEOLF NH\ LQIUDVWUXFWXUH WHFKQRORJ\ 0()RI1RYHPEHUZKLFKZDVJLYHQWKH ,QGLYLGXDOV DQG OHJDO HQWLWLHV WKDW DUH VXEMHFW WR WKH UDQNRIODZWKURXJKWKHƄUVWVXSSOHPHQWDOSURYLVLRQRI &RPPLVVLRQpVVXSHUYLVLRQDQGFRQWUROPXVWXVHWKLV /HJLVODWLYH'HFUHH1RRI-XQH QHWZRUNIRUSURYLGLQJDQ\LQIRUPDWLRQDQGGRFXPHQ WDWLRQUHTXLUHGRIWKHP 7KH6LQJOH:LQGRZIRU)RUHLJQ7UDGHHQDEOHVWKHSDU ties involved in international trade and transport to ,Q WKH DUHD RI RQOLQH JRYHUQPHQW WUDQVDFWLRQV UHJ HOHFWURQLFDOO\SURFHVVWKHSDSHUZRUNUHTXLUHGE\WKH XODWLRQV SURYLGHG E\ WKH *HQHUDO $GPLQLVWUDWLYH FRPSHWHQWDJHQFLHVLQDFFRUGDQFHZLWKWKHUHJXOD 3URFHGXUHV$FW $FW1R RI$SULOLQ WLRQVFXUUHQWO\LQIRUFHRUUHTXHVWHGE\WKHSDUWLHVLQ FOXGHQRWLƄFDWLRQE\HOHFWURQLFDQGRWKHUPHDQVWKDW FRQQHFWLRQZLWKWKHWUDQVLWHQWU\WRRUH[LWRIJRRGV HVWDEOLVK UHOLDEOH FRQƄUPDWLRQ RI UHFHLSW DQG LGHQWLƄ IURPWKHQDWLRQDOWHUULWRU\DQGWRLPSOHPHQWHFRP FDWLRQ RI WKH UHFHLYLQJ SDUW\SURYLGHG WKDW WKH XVHU PHUFH SURYLVLRQV RI WKH IUHH WUDGH DJUHHPHQWV ZLWK KDVH[SUHVVO\UHTXHVWHGUHWXUQUHFHLSW,WDOVRDXWKRU the United States and Canada, as well as the com izes the use of electronic means for communications PLWPHQWVRIWKH$3(&(OHFWURQLF&RPPHUFH6WHHULQJ ZLWKLQJRYHUQPHQW *URXSUHJDUGLQJSDSHUOHVVFRPPHUFH

8QGHUWKLV$FWXVHUVPD\UHTXHVWWKDWLQIRUPDWLRQRU E  &RQVXPHUSURWHFWLRQ GRFXPHQWDWLRQSHUWDLQLQJWRDGPLQLVWUDWLYHSURFHVVHV 7KH &RQVXPHU 3URWHFWLRQ &RGH $FW 1R  RI EHVHQWWRWKHPE\UHPRWHPHDQV 6HSWHPEHU LQFOXGHVDQXPEHURISURYLVLRQV II. REPORT ON LEGISLATION IN THE LATIN AMERICAN COUNTRIES 57

IRUSURWHFWLQJRQOLQHFRQVXPHUV$PRQJRWKHUWKLQJV WKH0LQLVWU\RI-XVWLFHDQG+XPDQ5LJKWVLVUHVSRQ LW HQDEOHV FRQVXPHUV WR RSW RXW RI FRQWUDFWV XVLQJ VLEOH IRU RYHUVHHLQJ LPSOHPHQWDWLRQ RI WKH $FW 7KH the same mechanisms of form, place and means em $FW PDNHV D GLVWLQFWLRQ EHWZHHQ SHUVRQDO GDWD DQG SOR\HGWRFRQFOXGHWKHFRQWUDFWLQFOXGLQJHOHFWURQLF VHQVLWLYH GDWD ,W DOVR PDQGDWHV UHJLVWUDWLRQ RI SXE PHGLD,WDOVRVWLSXODWHVWKDWSURYLGHUVPXVWVKRZWKDW OLFRUSULYDWHGDWDEDQNVZLWKWKH1DWLRQDO5HJLVWU\IRU they have furnished users, in timely fashion, a copy 3URWHFWLRQRI3HUVRQDO'DWDDQGSURKLELWVWKHWUDQVIHU RIWKHFRQWUDFWLQFOXGLQJWKHJHQHUDOWHUPVDQGFRQ of personal data to countries that do not provide suit ditions, and they must provide information on their DEOHOHYHOVRIVHFXULW\DQGSURWHFWLRQ LGHQWLƄFDWLRQGRPLFLOHHPDLODQGRWKHUFRQWDFWLQIRU ,QGLYLGXDOVSULYDWHHQWLWLHVDQGSXEOLFHQWLWLHVWKDWXVH PDWLRQ VWRUHRUWUDQVIHUSULYDWHLQIRUPDWLRQRIDGDWDVXEMHFW The Code also prohibits unsolicited and persistent ad DUHUHTXLUHG L WRHQVXUHWKDWWKHLQIRUPDWLRQLVXVHGLQ YHUWLVLQJE\HPDLOGLVUHJDUGLQJDFRQVXPHUpVUHTXHVW a manner that is suitable, proportional and necessary WKDW VXFK DFWLYLWLHV EH FHDVHG ,W SURKLELWV VHQGLQJ IRUWKHVFRSHDQGSXUSRVHIRUZKLFKLWLVFROOHFWHG LL  PDVV HPDLOV WR SURPRWH SURGXFWV DQG VHUYLFHV DV WRREWDLQWKHFRQVHQWRIGDWDVXEMHFWEHIRUHSURYLGLQJ ZHOO DV WHOHPDUNHWLQJ WR HPDLO DGGUHVVHV WKDW KDYH WKHGDWD LLL WRXVHWKHGDWDIRUWKHSXUSRVHVIRUZKLFK EHHQLQFOXGHGLQWKHUHJLVWU\HVWDEOLVKHGE\WKH1D LWZDVREWDLQHGDQG LY WRWDNHWHFKQLFDORUJDQL]D WLRQDO,QVWLWXWHIRUWKH3URWHFWLRQRI&RPSHWLWLRQDQG WLRQDO DQG OHJDO PHDVXUHV WR JXDUDQWHH WKH VHFXULW\ ,QWHOOHFWXDO3URSHUW\5LJKWVWRNHHSDUHFRUGRIFRQ DQGFRQƄ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ƄHVYLRODWLRQVDVPLQRUVHULRXVDQGYHU\ 'HFUHH1R3&0RI-DQXDU\7KH serious, and establishes administrative sanctions, in Code stipulates that all establishments that are open GHSHQGHQWO\RIDQ\FLYLORUFULPLQDOOLDELOLW\WKDWPLJKW WRWKHSXEOLFPXVWNHHSD/RJERRNRI&RPSODLQWVDQG EHLQRUGHU WKDWRQOLQHSURYLGHUVPXVWNHHSD9LUWXDO/RJERRNRI Complaints and provide consumers with the neces 7KH OHJDO IUDPHZRUN IRU SURWHFWLRQ RI SHUVRQDO GDWD sary support to enable them to record their complaints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information detrimental to the competitive process by ,QWKHDUHDRILQWHOOHFWXDOSURSHUW\ULJKWVWKH&RS\ULJKW PLVOHDGLQJRUFRQIXVLQJFRQVXPHUV $FW /HJLVODWLYH'HFUHH1R RI$SULOLQ FRUSRUDWHVLQWR3HUXYLDQODZDQXPEHURIPHDVXUHV F  3URWHFWLRQRISHUVRQDOGDWD FRQWDLQHGLQWKH%HUQH&RQYHQWLRQWKH75,36$JUHH 7KH3URWHFWLRQRI3HUVRQDO'DWD$FW $FW1R  PHQW DQG 'HFLVLRQ  RI WKH &RPPLVVLRQ RI WKH RI-XO\LVLQOLQHZLWKWKH'LUHFWLYHVIRU+DU &DUWDJHQD$JUHHPHQWDSSURYLQJWKH&RPPRQ&RS PRQL]DWLRQRI'DWD3URWHFWLRQLQWKH,EHUR$PHULFDQ \ULJKWDQG5HODWHG5LJKWV5HJLPH7KH$FWSURWHFWV &RPPXQLW\LVVXHGE\WKH,EHUR$PHULFDQ'DWD3UR DXWKRUVRIOLWHUDU\DQGDUWLVWLFZRUNVDVZHOODVWKHLU WHFWLRQ 1HWZRUN 7KH $FW SURWHFWV SHUVRQDO GDWD ULJKWV KROGHUV DQG WKRVH KROGLQJ FRS\ULJKWUHODWHG ZKHWKHU DXWRPDWHG RU QRW RI DOO LQGLYLGXDOV RU OHJDO ULJKWV,WDOVRUHJXODWHVFROOHFWLYHEDUJDLQLQJRUJDQL]D HQWLWLHVDQGWKHKDQGOLQJRIVXFKLQIRUPDWLRQLQSXEOLF tions and protects the authors of databases in terms RUSULYDWHGDWDEDQNVLQRUGHUWRJXDUDQWHHWKHULJKWWR VLPLODU WR WKRVH VHW IRUWK LQ WKH 75,36 $JUHHPHQW SHUVRQDOSULYDF\7KH1DWLRQDO3HUVRQDO'DWD3URWHF /HJLVODWLYH 'HFUHH 1R  DPHQGLQJ /HJLVODWLYH WLRQ$XWKRULW\RIWKH1DWLRQDO'LUHFWRUDWHRI-XVWLFHRI 'HFUHH1RRI-XQHLQFRUSRUDWHVWKH 58 Study on the harmonization of cyberlegislation in Latin America

XVHRIWHFKQRORJLFDOPHDVXUHVWRSURWHFWZRUNVDQG RWKHU W\SHV RI FRPPXQLFDWLRQ DQG JHRORFDWLRQ LQIRUPDWLRQV\VWHPVGHVLJQHGWRPDQDJHULJKWV DSSVRQPRELOHSKRQHV ,QWKHLQWHUQDWLRQDODUHQD3HUXKDVVLJQHGWKHIROORZ 7RLPSURYHLQIRUPDWLRQVHFXULW\3H&(57WKH3H LQJLQVWUXPHQWV ruvian computer security incident response team, ZDVVHWXSLQ,WKDVSOD\HGDQLPSRUWDQWUROH • :,32WUHDWLHVLQFOXGLQJWKH:,32&RS\ULJKW7UHD LQGHDOLQJZLWKFRPSXWHUVHFXULW\LQFLGHQWV W\DQGWKH:,323HUIRUPDQFHVDQG3KRQRJUDPV Treaty J  3HQGLQJOHJLVODWLRQDQGFKDOOHQJHV • %HLMLQJ7UHDW\RQ$XGLRYLVXDO3HUIRUPDQFHV 3HUX QHHGV WR DFFHGH WR WKH &RXQFLO RI (XURSHpV &RQYHQWLRQ RQ &\EHUFULPH LQ RUGHU WR VWUHQJWKHQ ,QWKHDUHDRILQGXVWULDOSURSHUW\WKH,QGXVWULDO3URSHUW\ LQWHUQDWLRQDO FRRSHUDWLRQ LQ WKH LQYHVWLJDWLRQ DQG $FW /HJLVODWLYH'HFUHH1R RI$SULOLQ SURVHFXWLRQRIF\EHUFULPH,WDOVRQHHGVWRVHWXSDQ FRUSRUDWHVDQXPEHURIPHDVXUHVIURP'HFLVLRQ DJHQF\WRSURSHUO\FRRUGLQDWHSROLFLHVDQGUHJXODWLRQV RIWKH&RPPLVVLRQRIWKH&DUWDJHQD$JUHHPHQWWKH RQWKHLQIRUPDWLRQVRFLHW\VRDVWRHQVXUHMRLQWDFWLRQ &RPPRQ,QGXVWULDO3URSHUW\5HJLPHIRUWKH$QGHDQ WRZDUGVHQKDQFLQJWUDQVSDUHQF\DQGDFFHVVWRLQIRU &RXQWULHVWKH3DULV&RQYHQWLRQIRUWKH3URWHFWLRQRI PDWLRQE\WKHFRPPLVVLRQRQVSDFHGDWD3H&(57 ,QGXVWULDO3URSHUW\DQGWKH75,36$JUHHPHQW7KH$FW WKHSHUVRQDOGDWDDXWKRULW\WKHGLJLWDOVLJQDWXUHVV\V LQFOXGHVUHJXODWLRQVRQSDWHQWVIRULQYHQWLRQVFHUWLƄ WHPGLJLWDOOLWHUDF\SROLFLHVDQGWRROVIRUHJRYHUQPHQW FDWHVRISURWHFWLRQXWLOLW\PRGHOVLQGXVWULDOGHVLJQV DQGHFRPPHUFH LQGXVWULDOVHFUHWVWUDGHPDUNVEXVLQHVVQDPHVFRP PHUFLDO ORJRV DQG GHQRPLQDWLRQV RI RULJLQ $PRQJ PHDVXUHVWDNHQWRFRPEDWSLUDF\3HUXDGRSWHG/HJ URUGUAY LVODWLYH'HFUHH1RRI-XQHDSSURYLQJ 7KH 'LJLWDO $JHQGD  RI 8UXJXD\ LQFOXGHV PHDVXUHVWREHWDNHQDWWKHERUGHUWRSURWHFWFRS\ DPRQJLWVREMHFWLYHVWKDWRIGHYHORSLQJHFRPPHUFH ULJKWDQGUHODWHGULJKWVDQGWUDGHPDUNV DQGLQLWLDWLYHVWRSURPRWHWKHƄQDQFLDOLQFOXVLRQRILWV H  'RPDLQQDPHV FLWL]HQV7KHPDLQODZVRQHFRPPHUFHDUHWKH$FW RQ WKH $GPLVVLELOLW\ 9DOLGLW\ DQG /HJDO (IƄFDF\ RI 7KH3HUXYLDQ6FLHQWLƄ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manifests and customs declarations, is incorporated LOOHJDOWUDIILFNLQJ LQWKHFRXQWU\pVGRPHVWLFODZ ,Q DGGLWLRQ PHFKDQLVPV ZHUH VHW XS IRU LQWHU 7KH(OHFWURQLF'RFXPHQWVDQG(OHFWURQLF6LJQDWXUHV DJHQF\FRRUGLQDWLRQEHWZHHQWKH1DWLRQDO3ROLFH $FW HVWDEOLVKLQJ WKH DGPLVVLELOLW\ YDOLGLW\ DQG OHJDO WKH 3XEOLF 3URVHFXWLRQ 6HUYLFH DQG RWKHU VSH HIƄFDF\ RI HOHFWURQLF GRFXPHQWV DQG HOHFWURQLF VLJ FLDOL]HG DJHQFLHV 0HDVXUHV ZHUH SXW LQ SODFH WR QDWXUHV $FW 1R   RI  6HSWHPEHU  H[HPSW SURYLGHUV RI WHOHFRPPXQLFDWLRQV VHUYLFHV GUDZVDGLVWLQFWLRQEHWZHHQHOHFWURQLFVLJQDWXUHVDQG IURPFULPLQDOOLDELOLW\6WHSVZHUHDOVRWDNHQWRLQ DGYDQFHGHOHFWURQLFVLJQDWXUHVJLYLQJWKHPGLIIHUHQW tervene or record telephone communications or OHJDO HIIHFWV DQG UHFRJQL]HV WKH IXQFWLRQDO HTXLYD II. REPORT ON LEGISLATION IN THE LATIN AMERICAN COUNTRIES 59

lence of print documents with respect to documents WLRQVDQGHVWDEOLVKHGHOHFWURQLFGRPDLQVLQDOOMXGLFLDO VHQWLQGDWDPHVVDJHVDVZHOODVRIKDQGZULWWHQVLJ EUDQFKSURFHHGLQJV ERWKDGPLQLVWUDWLYHSURFHHGLQJV QDWXUHV ZLWK UHVSHFW WR GLJLWDO VLJQDWXUHV WKDW KDYH DQGDFWXDOFRXUWSURFHHGLQJV  EHHQ FHUWLƄHG E\ DQ DFFUHGLWHG VHUYLFH SURYLGHU ,W 7KH )LQDQFLDO ,QFOXVLRQ $FW $FW 1R   RI  also authorizes authorities in the different branches 0D\  DOORZV IRU ZDJHV UHWLUHPHQW SHQVLRQV RIJRYHUQPHQWWRFDUU\RXWDGPLQLVWUDWLYHSURFHGXUHV DQGSURIHVVLRQDOIHHVWREHSDLGWKURXJKGHSRVLWVLQ WKURXJK HOHFWURQLF PHDQV DQG WR XVH HOHFWURQLF ƄOHV EDQNDFFRXQWVRULQHOHFWURQLFFXUUHQF\LQVWUXPHQWV DQG GLJLWDO VLJQDWXUHV LQ WKHLU DFWLRQV HLWKHU DPRQJ ,W DOVR UHJXODWHV HOHFWURQLF PRQH\ LQ WKH 8UXJXD\DQ WKHPVHOYHVRUZLWKSULYDWHSDUWLHV ƄQDQFLDOV\VWHPDQGEDQNDFFRXQWVZLWKƄQDQFLDOLQ 7KH$FWJRYHUQVHOHFWURQLFFHUWLƄFDWLRQVHUYLFHVGHV WHUPHGLDWLRQLQVWLWXWHV,WVHWVDWZR\HDUWLPHIUDPH LJQDWHVWKH$JHQF\IRUH*RYHUQPHQWDQG,QIRUPDWLRQ IRULPSOHPHQWDWLRQRIWKH$FWDQGLPSRVHVUHVWULFWLRQ 6RFLHW\DVWKHQDWLRQDOURRWFHUWLƄFDWLRQDXWKRULW\DQG RQWKHXVHRIFDVK,WDOVRFUHDWHVWD[LQFHQWLYHVIRU FRQIHUVRQWKH(OHFWURQLF&HUWLƄFDWLRQ8QLWDGHFRQ WKHXVHRIGHELWDQGFUHGLWFDUGVUHGXFLQJWKHUDWHRI FHQWUDWHGERG\RIWKH$JHQF\IRUH*RYHUQPHQWDQG WKHYDOXHDGGHGWD[ WKH,QIRUPDWLRQ6RFLHW\DXWKRULW\WR L DFFUHGLWFHUWL $ QXPEHU RI UXOHV KDYH EHHQ LVVXHG LQ WKH DUHD RI ƄFDWLRQVHUYLFHSURYLGHUV LL PRQLWRUWKHTXDOLW\DQG WD[HVDQGFXVWRPVLQFOXGLQJWKH7D[6\VWHP$FW $FW UHOLDELOLW\RIDFFUHGLWHGFHUWLƄFDWLRQVHUYLFHV LLL UHFHLYH 1R RI-DQXDU\ZKLFKSURYLGHVH[ DQGHYDOXDWHFRPSODLQWVRIFHUWLƄFDWHKROGHUV LY UHJ HPSWLRQVIURPWKHLQFRPHWD[RQHFRQRPLFDFWLYLWLHV XODWHDQG Y VDQFWLRQVHUYLFHSURYLGHUVZKRGRQRW DQG WKH LQFRPH WD[ RQ SK\VLFDO SHUVRQV IRU SURƄWV FRPSO\ZLWKWKHODZ JHQHUDWHG E\ WKH SURGXFWLRQ RI VRIWZDUH DQG RWKHU 7KH'HFUHHRI'HFHPEHUOD\VGRZQUHJXOD GHYHORSPHQWV LQ ELRWHFKQRORJ\ DQG ELRLQIRUPDWLFV WLRQV IRU WKH (OHFWURQLF 'RFXPHQWV DQG (OHFWURQLF 'HFUHH1RRI-XQHUHJXODWHVH[ 6LJQDWXUHV $FW $FW 1R   ZKLFK JRYHUQV WKH HPSWLRQVIURPWKHLQFRPHWD[RQSK\VLFDOSHUVRQVLQ QDWLRQDOHOHFWURQLFFHUWLƄFDWLRQLQIUDVWUXFWXUHDQGHV WKH DUHD RI QHZ WHFKQRORJLHV 'HFUHH 1R  WDEOLVKHVWKHUDQNLQJV\VWHPKHDGHGE\WKH$JHQF\ RI$SULOUHLWHUDWHVWKHGHFODUDWLRQRIQDWLRQDO IRUH*RYHUQPHQWDQGWKH,QIRUPDWLRQ6RFLHW\DVWKH LQWHUHVW IRU WKH VRIWZDUHSURGXFWLRQ VHFWRU LQ UHJDUG QDWLRQDOURRWFHUWLƄFDWLRQDXWKRULW\7KXVWKH$JHQF\ WRLQWHUQDWLRQDOFRPSHWLWLRQDQGH[HPSWVSURƄWVIURP IRU H*RYHUQPHQW DQG WKH ,QIRUPDWLRQ 6RFLHW\ LV VRIWZDUHSURGXFWLRQIURPWKHLQFRPHWD[RQHFRQRPLF WKHKLJKHVWDXWKRULW\LQWKHFHUWLƄFDWLRQFKDLQWKDWLV DFWLYLWLHVWKURXJK'HFHPEHU UHVSRQVLEOH IRU LVVXLQJ GLVWULEXWLQJ UHYRNLQJ DQG 'HFUHHRI$XJXVWHVWDEOLVKHGWKH DGPLQLVWHULQJ FHUWLƄFDWHV RI DFFUHGLWHG SURYLGHUV RI V\VWHPIRUHQDEOLQJFHUWDLQWD[SD\HUVWRVXEPLWWKHLU FHUWLƄFDWLRQVHUYLFHV WD[ UHWXUQV RQOLQH DQG 'HFUHH 1R  RI  7KH$FWRQ$FFRXQWDELOLW\DQG%XGJHW([HFXWLRQIRU $SULOUHJXODWHVSUHGLFWLRQVRIWKHRXWFRPHVRI )LVFDO

GLUHFWHG WR HLWKHU VSHFLƄF RU XQVSHFLƄHG FRQVXP PXQLFDWLRQRIWKHLUGDWDE\EULQJLQJDQDFWLRQRIGDWD HUVtE\DQ\PHDQVRIFRPPXQLFDWLRQLIFRQWDLQLQJ SURWHFWLRQRUKDEHDVGDWDEHIRUHWKHMXGLFLDODXWKRULW\ VXIƄFLHQWO\ SUHFLVH LQIRUPDWLRQ RQ WKH SURGXFWV DQG LQDVXPPDU\SURFHHGLQJ7KH$FWGHYHORSVDQXPEHU VHUYLFHV RIIHUHG t ELQGLQJ RQ WKH SDUW\ PDUNLQJ WKH RISULQFLSOHVWKDWVKRXOGJRYHUQWKHKDQGOLQJRIGDWD RIIHUDQGRQWKHFRQVXPHUH[SUHVVO\WDNLQJDGYDQWDJH LQFOXGLQJWKHIROORZLQJ L OHJDOLW\ LL DFFXUDF\ LLL SXU RILWIRUWKHSHULRGRIWLPHGXULQJZKLFKWKHRIIHUUH SRVH LY SULRULQIRUPHGFRQVHQW Y VHFXULW\RIGDWD PDLQV LQ HIIHFW 8QGHU WKLV ODZ DQ RIIHU RI SURGXFWV YL FRQƄGHQWLDOLW\DQG YLL UHVSRQVLELOLW\ RUVHUYLFHVPDGHRXWVLGHWKHSURYLGHUpVSODFHRIEXVL 7KH DJHQF\ UHVSRQVLEOH IRU VXSHUYLVLQJ FRPSOLDQFH QHVVE\PDLOWHOHSKRQHWHOHYLVLRQ,7PHGLDRUVLPLODU ZLWKWKH$FWLVWKH8QLWRQ5HJXODWLRQDQG&RQWURORI PHDQVJLYHVWKHFRQVXPHUZKRDFFHSWVLWWKHULJKWWR 3HUVRQDO'DWDDGHFRQFHQWUDWHGERG\RIWKH$JHQF\ withdraw his or her acceptance or annul the contract IRUH*RYHUQPHQWDQGWKH,QIRUPDWLRQ6RFLHW\ZKLFK RQKLVRUKHURZQLQLWLDWLYHZLWKLQƄ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o data user may possess personal data other than GHDOLQJ ZLWK FRPSODLQWV IRU DPRXQWV RI XQGHU  WKRVH WKDW KDYH EHHQ GHFODUHG LQ WKH 5HJLVWU\ 7KH 8UXJXD\DQ SHVRV DSSUR[LPDWHO\ 86   7KH 8QLWRQ5HJXODWLRQDQG&RQWURORI3HUVRQDO'DWDKDV SURFHGXUHLVVXEVWDQWLDWHGEHIRUHWKHMXVWLFHVRIWKH WKH SRZHU WR VDQFWLRQ YLRODWLRQV RI WKH $FW E\ LVVX SHDFH LQJ ZDUQLQJV ƄQHV RI XS WR  LQGH[HG XQLWV 8QGHU'HFUHH1RRI$XJXVW0(5 RUVXVSHQVLRQRIWKHGDWDEDVH,QWKHDUHDRIFULPLQDO &2685UHVROXWLRQ1RRQFRQVXPHUVpULJKW VDQFWLRQVWKH$FWVWLSXODWHVWKDWDQ\RQHZKRE\YLU to information in online commercial transactions, was WXHRIKLVRUKHUMRERUVRPHRWKHUW\SHRIUHODWLRQVKLS LQFRUSRUDWHGLQWRWKHGRPHVWLFOHJLVODWLRQ ZLWKWKHSHUVRQLQFKDUJHRIDGDWDEDVHKDVDFFHVV WRRULQWHUYHQHVDWDQ\VWDJHLQWKHSURFHVVLQJRISHU F  3URWHFWLRQRISHUVRQDOGDWD VRQDO GDWD LV UHTXLUHG WR PDLQWDLQ VWULFW SURIHVVLRQDO ,QDGGLWLRQWRWKHSURWHFWLRQDIIRUGHGE\WKH&RQVWLWX VHFUHF\UHJDUGLQJWKHGDWD WLRQWKH$FWRQWKH3URWHFWLRQRI3HUVRQDO'DWDDQG 7KHUHJXODWLRQVWRWKH$FWDUHVHWIRUWKLQ5HJXODWRU\ Habeas Data $FWLRQV $FW1R RI$XJXVW 'HFUHH1RRI$XJXVWZKLFKGHVFULEHV  ZDV HQDFWHG 7KLV $FW DSSOLHV WKH PRGHO VHW LQ JUHDWHU GHWDLO WKH VHFXULW\ PHDVXUHV WKDW PXVW EH IRUWKLQ'LUHFWLYH(&RIWKH(XURSHDQ3DUOLDPHQW LPSOHPHQWHGWRSURWHFWSHUVRQDOGDWDDQGWKHUHTXLUH DQGWKH&RXQFLORI(XURSHRQSURWHFWLRQIRUWKHSUL PHQWVIRUWKHGLIIHUHQWSURFHGXUHVHQYLVDJHGLQWKH$FW YDF\RILQGLYLGXDOVLQUHVSHFWRIWKHKDQGOLQJRIWKHLU G  ,QGXVWULDODQGLQWHOOHFWXDOSURSHUW\ personal data and the free movement of such data, a level of protection that has been endorsed by the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publish, translate, adapt, transform, communicate or WKHSXEOLFRUSULYDWHVSKHUHV PDNH WKHP SXEOLFO\ DYDLODEOH LQ DQ\ IRUP RU E\ DQ\ SURFHGXUH 7KH$FWJLYHVGDWDVXEMHFWVWKHULJKWWRLQIRUPDWLRQWR DFFHVVWRFRUUHFWLRQXSGDWLQJLQFOXVLRQRUGHOHWLRQ $OVR RI QRWH DUH $FW 1R  RI  0DUFK  RIWKHLUSHUVRQDOGDWDDVZHOODVWKHULJKWWRFKDOOHQJH DSSURYLQJ WKH :,32 3HUIRUPDQFH DQG 3KRQRJUDPV DSHUVRQDOHYDOXDWLRQEDVHGRQWKHKDQGOLQJZKHWKHU 7UHDW\ DQG WKH $JUHHG 6WDWHPHQWV &RQFHUQLQJ WKH DXWRPDWHGRUQRWRIGDWDDQGWKHULJKWWROLPLWFRP :,32 3HUIRUPDQFH DQG 3KRQRJUDPV 7UHDW\ DQG II. REPORT ON LEGISLATION IN THE LATIN AMERICAN COUNTRIES 61

$FW1RRI2FWREHUDSSURYLQJWKH 2FWREHU  DPHQGLQJ DUWLFOH  RI WKH &ULPLQDO :,32 &RS\ULJKW 7UHDW\ DQG WKH $JUHHG 6WDWHPHQWV Code, provides prison sentences for anyone interfer &RQFHUQLQJ WKH :,32 &RS\ULJKW 7UHDW\ ,Q WKH DUHD LQJ ZLWK WKH UHJXODU IXQFWLRQLQJ RI ZLUHG RU ZLUHOHVV RIWUDGHPDUNV8UXJXD\KDVDGRSWHGWKH5HJXODWLRQV WHOHFRPPXQLFDWLRQV 7KH FRXUWV KDYH LVVXHG UXOLQJV 5HJDUGLQJ 7UDGHPDUNV $FW 1R   RI  2FWR on crimes related to fraud or deception conducted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ƄFDQW WUDO6HUYLFHIRU8QLYHUVLW\,QIRUPDWLFVRQWKHSURFHVV FKDQJHVQHHGWREHPDGHWRLQFOXGHWKHVXEVWDQWLYH RI UHJLVWHULQJ DQG UHQHZLQJ WKH JRYHUQPHQW GRPDLQ DQGSURFHGXUDOSURYLVLRQVHQYLVDJHGLQWKH&RXQFLORI QDPHVJXEX\DQGPLOX\ (XURSHpV&RQYHQWLRQRQ&\EHUFULPH LQGHSHQGHQWO\RI ZKHWKHURUQRWWKHFRXQWU\DFFHGHVWRLW LQRUGHUWR I  &\EHUFULPHDQGVHFXULW\RILQIRUPDWLRQ VWUHQJWKHQLQWHUQDWLRQDOFRRSHUDWLRQRQWKHLQYHVWLJD :KLOH WKHUH LV QR VSHFLƄF ODZ RQ FRPSXWHU FULPH WLRQ DQG SURVHFXWLRQ RI F\EHUFULPH 7KH $JHQF\ IRU WKHUHLVOHJLVODWLRQFRYHULQJDQXPEHURIFULPHVLQWKLV H*RYHUQPHQWDQGWKH,QIRUPDWLRQ6RFLHW\KDVVXEPLW FDWHJRU\7KH1DWLRQDO%XGJHW$FW $FW1R  ted to the parliament a bill on cybercrime, which will RI-DQXDU\PDNHVXVLQJGLJLWDODQGWHOHPDWLF EHGLVFXVVHG PHGLDWRLQWHQWLRQDOO\WUDQVPLWDQLQDFFXUDWHWH[WRUWR DOWHURUGHVWUR\DGRFXPHQWVWRUHGLQPDJQHWLFIRUP BOLIVARIAN REPUBLIC OF RU LWV EDFNXS  OHJDOO\ HTXLYDOHQW WR IRUJHU\ RI SXEOLF VENEZUELA GRFXPHQWV ZKLFK LV GHƄQHG LQ WKH &ULPLQDO &RGH )XUWKHUPRUHWKH$FWRQ6H[XDO9LROHQFH$JDLQVW&KLO %DVHG RQ LWV 1DWLRQDO 3ODQ RQ 6FLHQFH 7HFKQRORJ\ GUHQ$GROHVFHQWVRU'LVDEOHG,QGLYLGXDOVIRU3URƄ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ƄQDQFLDOVHFWRUGLVFXVVHGEHORZSURYLGHDOHJDOEDVLV RIRQHRUPRUHPLQRUVRUGLVDEOHGSHUVRQV IRUHFRPPHUFHWUDQVDFWLRQV 7KH$FWRQ$WWHPSWVWR,QWHUIHUHZLWKWKH5HJXODU)XQF WLRQLQJRI7HOHFRPPXQLFDWLRQV $FW1R RI D  (OHFWURQLFWUDQVDFWLRQVHOHFWURQLFVLJQDWXUHV 62 Study on the harmonization of cyberlegislation in Latin America

,QWKHDUHDRIHOHFWURQLFWUDQVDFWLRQVWKH'DWD0HV DGHTXDWHDQGQRQGHFHSWLYHLQIRUPDWLRQWRFDUGKROG VDJHVDQG(OHFWURQLF6LJQDWXUHV$FWLQFOXGHVVHYHUDO HUV SURYLVLRQVRIWKH81&,75$/0RGHO/DZRQ(OHFWURQLF %\LWV'HFLVLRQ1RRI-DQXDU\WKH &RPPHUFHDQGUHFRJQL]HVWKHYDOLGLW\DQGOHJDOYDOXH 2IƄFHRIWKH6XSHULQWHQGHQWRI%DQNLQJ6HFWRU,QVWL RIHOHFWURQLFVLJQDWXUHVGDWDPHVVDJHVDQGDOOLQWHO WXWLRQV LVVXHG UXOHV JRYHUQLQJ WKH XVH RI HOHFWURQLF OLJLEOHLQIRUPDWLRQLQHOHFWURQLFIRUPDWVLQGHSHQGHQWO\ EDQNLQJVHUYLFHVFDUULHGRXWWKURXJKDXWRPDWLFWHOOHU of the physical medium and whether it comes from in PDFKLQHV PRELOH EDQNLQJ SRLQWV RI VDOH ,QWHUQHW GLYLGXDOVRUOHJDOHQWLWLHVLQWKHSXEOLFRUSULYDWHVHFWRU EDQNLQJ DQG WHOHSKRQH EDQNLQJ WR VXSSRUW GLIIHUHQW ,WDOVRUHJXODWHVWKHRSHUDWLRQRIFHUWLƄFDWLRQVHUYLFH ƄQDQFLDO WUDQVDFWLRQV LQFOXGLQJ GRPLFLOLQJ VHUYLFHV SURYLGHUVDQGWKHOHJDOVWDWXVRIHOHFWURQLFFHUWLƄFDWHV payments and transfers to third parties, in a secure 7KH 3DUWLDO 5HJXODWLRQV WR WKH 'DWD 0HVVDJHV DQG HQYLURQPHQW XQGHU WKH UHVSRQVLELOLW\ RI WKH EDQNLQJ (OHFWURQLF6LJQDWXUHV$FWRI'HFHPEHUJR LQVWLWXWLRQVFRQFHUQHGVRDVWRSURWHFWXVHUVDJDLQVW LQWRJUHDWHUGHWDLORQFHUWDLQDVSHFWVRIWKH$FWSDU HOHFWURQLFIUDXG$PRQJRWKHUVHFXULW\PHDVXUHVWKH WLFXODUO\LQUHODWLRQWRWKHDFFUHGLWDWLRQRIFHUWLƄFDWLRQ decision calls for the implementation of multiple au VHUYLFHSURYLGHUVDQGWKHSRZHUVRIWKH2IƄFHRIWKH thentication measures to protect data in the course of 6XSHULQWHQGHQW RI (OHFWURQLF &HUWLƄFDWLRQ 6HUYLFHV HOHFWURQLFWUDQVDFWLRQV They also establish rules that must be observed in ,QWKHDUHDRIHJRYHUQPHQWWUDQVDFWLRQVWKH2UJDQLF KDQGOLQJ WKH GDWD LQYROYHG LQ JHQHUDWLQJ HOHFWURQLF $FWRQWKH3XEOLF$GPLQLVWUDWLRQUHTXLUHVJRYHUQPHQW VLJQDWXUHV ZKLFK RQFH FUHDWHG E\ D FHUWLƄFDWLRQ entities to use electronic, computer and telematic service provider, must be delivered personally and PHGLD LQFOXGLQJ ZHE SDJHV IRU WKHLU RUJDQL]DWLRQ LPPHGLDWHO\ WR WKH VLJQHU 7KH\ DOVR GHƄQH VHFXULW\ RSHUDWLRQVDQGUHODWLRQVZLWKSHUVRQV8QGHUWKLV$FW standards, plans and procedures to be followed by documents reproduced by electronic, computer, op FHUWLƄFDWLRQVHUYLFHSURYLGHUV tical or telematic media have the same validity and $OVRRIQRWHLVWKH'HFUHHRI0D\GHFODULQJ HIIHFWDVRULJLQDOGRFXPHQWVSURYLGHGWKDWWKH\PHHW DFFHVVWRDQGXVHRIWKH,QWHUQHWWREHDSULRULW\SROLF\ WKHUHTXLUHPHQWVHVWDEOLVKHGE\ODZDQGWKDWWKHDX for the cultural, economic, social and political develop WKHQWLFLW\LQWHJULW\DQGLQDOWHUDELOLW\RIWKHLQIRUPDWLRQ PHQWRIWKH%ROLYDULDQ5HSXEOLFRI9HQH]XHOD WKH\FRQWDLQDUHJXDUDQWHHG 7KH3XEOLF3URFXUHPHQW$FWRI6HSWHPEHU $V UHJDUGV ƄQDQFLDO WUDQVDFWLRQV WKH *HQHUDO $FW JRYHUQV 6WDWH SURFXUHPHQW RI JRRGV SURYLVLRQ RI RQ %DQNLQJ DQG 2WKHU )LQDQFLDO ,QVWLWXWLRQV RI  VHUYLFHVDQGFRQVWUXFWLRQRIZRUNVLQRUGHUWRSUH 1RYHPEHUJRYHUQVYLUWXDOEDQNLQJGHPDWHULDO VHUYHSXEOLFDVVHWVVWUHQJWKHQVRYHUHLJQW\GHYHORS ized services, electronic delivery services, electronic production capacity and ensure transparency in the DFFRXQWLQJV\VWHPVDQGYLUWXDOƄQDQFLDOVHUYLFHVGH DFWLRQ RI SXEOLF DJHQFLHV &RQWUDFWRUV PD\ EH VH ƄQHG DV WKH JURXS RI SURGXFWV DQG VHUYLFHV RIIHUHG OHFWHG WKURXJK RSHQ FDOOV IRU ELGV FORVHG FDOOV IRU E\EDQNVVDYLQJVDQGORDQDQGRWKHUƄQDQFLDOLQVWL ELGVLQYLWDWLRQVWRWHQGHUDQGGLUHFWFRQWUDFWLQJ7KH WXWLRQVWRFDUU\RXWWKURXJKHOHFWURQLFPDJQHWLFRU $FWFRYHUVWHFKQLFDOVSHFLƄFDWLRQVLQHOHFWURQLFFRQ similar media, directly and in real time, transactions WUDFWLQJDQGUHTXLUHVWKHXVHRIGDWDPHVVDJHVDQG WKDWZRXOGWUDGLWLRQDOO\HQWDLOPDNLQJWHOHSKRQHFDOOV HOHFWURQLFVLJQDWXUHV RU UHTXLUH XVHUV WR JR WR WKH RIƄ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tion of a standard of interoperability that will enable system and to operators of credit, debit, prepaid and FLWL]HQVWRH[HUFLVHWKHLUULJKWWRLQIRUPDWLRQDQGVXE RWKHU ƄQDQFLDO DQG HOHFWURQLF SD\PHQW FDUGV WKH Ƅ PLWUHTXHVWVIRULQWHURSHUDEOHVHUYLFHV QDQFLQJRIVXFKFDUGVDQGUHODWLRQVEHWZHHQLVVXHUV FDUGKROGHUVDQGEXVLQHVVHVDIƄOLDWHGWRWKHV\VWHP 7KH$FWDOVRUHTXLUHVJRYHUQPHQWDJHQFLHVDQGHQ LQ RUGHU WR JXDUDQWHH UHVSHFW IRU DQG SURWHFWLRQ RI tities to develop interoperable information systems WKHULJKWVRIXVHUVRIWKRVHLQVWUXPHQWVRISD\PHQW DQG LQIRUPDWLRQ VHUYLFHV XVLQJ RSHQVWDQGDUG IUHH ,VVXHUV RI WKRVH LQVWUXPHQWV DUH UHTXLUHG WR SURYLGH VRIWZDUHDQGWRXVHFHUWLƄFDWLRQDQGHOHFWURQLFVLJQD II. REPORT ON LEGISLATION IN THE LATIN AMERICAN COUNTRIES 63

WXUHV,WDXWKRUL]HVWKRVHHQWLWLHVWRVXEVWDQWLDWHWKHLU HFRQRPLFDQGFRPPHUFLDODFWLYLW\DOORZLQJDFFHVVE\ administrative actions by electronic means, use elec SHUVRQVWRJRRGVDQGVHUYLFHVWRPHHWWKHLUQHHGV WURQLFƄOHVDQGGLJLWL]HWKHLUDUFKLYHVZKLFKPXVWEH HVWDEOLVKLQJ XQODZIXO DGPLQLVWUDWLYH DFWV UHODWHG VLJQHGHOHFWURQLFDOO\E\WKHRIƄFLDODXWKRUL]HGWRPDNH procedures and sanctions, economic crimes, their FHUWLƄHGGLJLWDOFRSLHV7KH$FWUHTXLUHVJRYHUQPHQW FULPLQDOL]DWLRQ DQG FRPSHQVDWLRQ IRU GDPDJH VXI VWDIIWRVHWXSDGLJLWDOUHSRVLWRU\ fered, for the consolidation of the socialist economic V\VWHPRISURGXFWLRQ 7KH,QIRJRYHUQPHQW$FWRI2FWREHUHVWDE OLVKHV UXOHV SULQFLSOHV DQG JXLGHOLQHV JRYHUQLQJ WKH 7KH $FW JRYHUQV HFRQRPLF DFWLYLWLHV LQ 9HQH]XHOD XVH RI IUHH LQIRUPDWLRQ WHFKQRORJLHV LQ 6WDWH SURFH LQFOXGLQJ WKRVH FDUULHG RXW WKURXJK HOHFWURQLF PH dures at the national, state and municipal levels, in GLDE\SXEOLFRUSULYDWHLQGLYLGXDOVDQGOHJDOHQWLWLHV RUGHU WR LPSURYH SXEOLF PDQDJHPHQW DQG IDFLOLWDWH ERWK QDWLRQDOV DQG IRUHLJQHUV +RZHYHU LW GRHV QRW FLWL]HQVpDFFHVVWRLQIRUPDWLRQLQWKHLUUROHVDVFRQ FOHDUO\HVWDEOLVKWKHREOLJDWLRQVRISURYLGHUVQRUGRHV trollers and users, as well as to promote national LWH[SUHVVO\GHƄQHWKHULJKWVRIRQOLQHFRQVXPHUVDV GHYHORSPHQWWRJXDUDQWHHWHFKQRORJLFDOVRYHUHLJQW\ ZDVWKHFDVHZLWKWKH$FWRQ3URWHFWLRQRI3HUVRQVLQ ,WSURPRWHVWKHHOLPLQDWLRQVLPSOLƄFDWLRQDQGDXWRPD $FFHVVLQJ*RRGVDQG6HUYLFHVRI)HEUXDU\ WLRQRIJRYHUQPHQWSURFHGXUHV ZKLFKZDVDEURJDWHGE\WKLV$FW 7KH$FWUHJXODWHVGLIIHUHQWVXEMHFWVVXFKDVIRUHQVLF 7KH 2UJDQLF $FW RQ 7HOHFRPPXQLFDWLRQVRI  -XQH informatics, critical infrastructures, interoperability, se UHTXLUHVRSHUDWRUVRIWHOHFRPPXQLFDWLRQVVHU FXULW\ RI LQIRUPDWLRQ DQG IUHH VRIWZDUH ,W DXWKRUL]HV YLFHV WR UHVSHFW XVHUVp ULJKWV LQFOXGLQJ WKH ULJKW WR LQGLYLGXDOVWR L VHQGDQ\NLQGRIUHTXHVWWKURXJKWKH DSSURSULDWH DQG QRQGHFHSWLYH LQIRUPDWLRQ RQ WKH XVHRI,&7V LL PDNHSD\PHQWVGHFODUHDQGSD\WD[HV FRQWHQW DQG FKDUDFWHULVWLFV RI ,QWHUQHW VHUYLFHV DV WKURXJK WKH XVH RI ,&7V LLL  UHFHLYH QRWLƄFDWLRQV E\ ZHOODVWKHULJKWWRIUHHO\VHOHFWVHUYLFHSURYLGHUVDQG HOHFWURQLFPHGLD LY DFFHVVSXEOLFLQIRUPDWLRQWKURXJK PDQGDWHVHTXLWDEOHWUHDWPHQWRIFRQVXPHUV)DLOXUH VHFXUHHOHFWURQLFPHDQVDQG Y HOHFWURQLFDOO\DFFHVV WR REVHUYH WKHVH REOLJDWLRQV LV SXQLVKHG ZLWK D ƄQH ƄOHVDPRQJRWKHUULJKWV,WDOVRHVWDEOLVKHVWKDWHOHF and, for certain offences, can even lead to revocation WURQLFƄOHVDQGGRFXPHQWVRIJRYHUQPHQWHQWLWLHVZLWK RIWKHDGPLQLVWUDWLYHO\JUDQWHGDXWKRULW\WRSURYLGHWHO HOHFWURQLF FHUWLƄFDWHV DQG VLJQDWXUHV KDYH WKH VDPH HFRPPXQLFDWLRQVVHUYLFHV OHJDOYDOLGLW\DQGSUREDWLYHHIƄFDF\DVSULQWHGƄOHVDQG 7KH 2UJDQLF $FW IRU WKH 3URWHFWLRQ RI &KLOGUHQ DQG GRFXPHQWVZLWKKDQGZULWWHQVLJQDWXUHV $GROHVFHQWVRI'HFHPEHUHVWDEOLVKHVSUH 7KH 3XEOLF 5HJLVWUDUV DQG 1RWDULHV $FW RI  'H YHQWLYHPHDVXUHVWRLQVXUHDJDLQVWWKHSURGXFWLRQDQG FHPEHU  HQFRXUDJHV WKH XVH RI WHFKQRORJLFDO VDOHRIFRPSXWHUL]HGHOHFWURQLFRUPXOWLPHGLDJDPHV PHGLDLQWKHVHDUHDVDVEHLQJLQWKHSXEOLFLQWHUHVW FRQVLGHUHGKDUPIXOWRWKHKHDOWKRULQWHJUDOGHYHORS VRDVWRVWUHDPOLQHSURFHGXUHVIRUUHFHLYLQJUHJLVWHU PHQW RI FKLOGUHQ DQG DGROHVFHQWV ,W DOVR SURKLELWV LQJ DQG SXEOLFL]LQJ GRFXPHQWV ZLWKRXW MHRSDUGL]LQJ XVLQJ PXOWLPHGLD RU QHWZRUNV WR DOORZ FKLOGUHQ DQG OHJDO VHFXULW\DQG JLYHV UHJLVWU\ HQWULHV DQG UHJLVWU\ DGROHVFHQWVWRYLHZPDWHULDOZLWKSRUQRJUDSKLFFRQ LQIRUPDWLRQIURPHOHFWURQLFPHDQVWKHIXOOOHJDOIRUFHRI tent, or content that condones violence, crime or use SXEOLFGRFXPHQWV7KH$FWSURYLGHVIRUGLJLWL]DWLRQRI RIWREDFFRDOFRKRORUGUXJV DOOSK\VLFDOPHGLDXVHGLQWKHUHJLVWU\DQGQRWDULDOV\V F  3URWHFWLRQRISHUVRQDOGDWD WHPDQGIRUWUDQVIHURIWKLVLQIRUPDWLRQWRGDWDEDVHV 7KHUHJLVWU\DQGQRWDULDOSURFHVVLVWREHFRQGXFWHG $V UHJDUGV WKH SURWHFWLRQ RI SULYDF\ DQG SHUVRQDO entirely on the basis of electronic documents, and the GDWDWKH&RQVWLWXWLRQRI9HQH]XHODRI'HFHPEHU HOHFWURQLF VLJQDWXUH RI UHJLVWUDUV DQG QRWDULHV LV WR HQVKULQHVWKHULJKWRIDOOSHUVRQVWRKDYHDFFHVV KDYHWKHVDPHHYLGHQWLDOYDOLGLW\DVWKHODZJLYHVWR to the information and data on themselves or their as KDQGZULWWHQVLJQDWXUHV VHWV WKDW DSSHDU LQ JRYHUQPHQW RU SULYDWH UHFRUGV H[FHSWLQFDVHVVSHFLƄ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all persons to protection of their honour, private life, PD[LPXP SURƄW PDUJLQV DQG HIIHFWLYHO\ RYHUVHHLQJ SULYDF\LPDJHFRQƄGHQWLDOLW\DQGUHSXWDWLRQDQGSUR 64 Study on the harmonization of cyberlegislation in Latin America

YLGHVFRQVWUDLQWVRQWKHXVHRILQIRUPDWLRQWHFKQRORJ\ 'HFLVLRQ &RPPRQ&RS\ULJKWDQG5HODWHG5LJKWV in order to protect the honour and personal and family 5HJLPH RIWKH&RPPLVVLRQRIWKH$QGHDQ&RPPX SULYDF\RIFLWL]HQVDQGWKHIXOOH[HUFLVHRIWKHLUULJKWV QLW\,WKDVDOVRVLJQHGWKH%HUQH&RQYHQWLRQDQGWKH 5RPH &RQYHQWLRQ DV ZHOO DV WKH :,32 &RS\ULJKW 7KH $FW RQ WKH 3URWHFWLRQ RI 3HUVRQV LQ $FFHVVLQJ 7UHDW\DQGWKH:,323HUIRUPDQFHDQG3KRQRJUDPV *RRGV DQG 6HUYLFHV RI  )HEUXDU\  SURYLGHV 7UHDW\ WKDW LQ HOHFWURQLF QHJRWLDWLRQV SURYLGHUV PXVW JXDU DQWHHWKHSULYDF\DQGFRQƄGHQWLDOLW\RIGDWDXVHGLQ ,QWKHOHJLVODWLYHUHDOPWKH,QGXVWULDO3URSHUW\$FWRI WUDQVDFWLRQVVRDVWROLPLWDFFHVVH[FOXVLYHO\WRDX 2FWREHUUHJXODWHVWKHULJKWVWRLQGXVWULDOFUH WKRUL]HGSHUVRQV ations, inventions or discoveries of those who invent, GLVFRYHURULQWURGXFHSURGXFWVDQGHQVXUHVWKHULJKWV 7KH ,QIRJRYHUQPHQW $FW SURYLGHV WKDW LQIRUPDWLRQ of producers, manufacturers or merchants to phrases FRQWDLQHGLQJRYHUQPHQWDUFKLYHVDQGUHFRUGVLVSXE RUVSHFLDOVLJQVWKDWWKH\XVHWRGLVWLQJXLVKWKHLUSURG OLFLQQDWXUHH[FHSWLQWKHFDVHRILQIRUPDWLRQRQWKH XFWVRUDFWLYLWLHVIURPWKRVHRIRWKHUV7KH$FWJLYHV KRQRXUSULYDWHOLIHSULYDF\LPDJHFRQƄGHQWLDOLW\DQG WKHVHULJKWVKROGHUVWKHULJKWWRUHJLVWHUWUDGHPDUNV reputation of persons and on the defence of the na ORJRVDQGEXVLQHVVQDPHVDVZHOODVSDWHQWVPRG WLRQ 7KH $FW DOVR DXWKRUL]HV JRYHUQPHQW HQWLWLHV WR HOVDQGLQGXVWULDOGUDZLQJV FROOHFW GDWD UHODWLQJ WR WKH ULJKWV DQG JXDUDQWHHV RI FKLOGUHQ DQG DGROHVFHQWV XSRQ WKH UHTXHVW RI WKH 7KH&RS\ULJKW$FWRI$XJXVWSURWHFWVFUHD SHUVRQOHJDOO\DXWKRUL]HGIRUWKDWSXUSRVH7KHLQIRU WLYHZRUNVRIWKHLPDJLQDWLRQZKHWKHUOLWHUDU\VFLHQWLƄF PDWLRQPD\QRWEHSXEOLFL]HGDVVLJQHGWUDQVIHUUHG RUDUWLVWLFLQDQ\JHQUHRUIRUPRIH[SUHVVLRQDQGRI RUVKDUHGZLWKDQ\LQGLYLGXDORUOHJDOHQWLW\ZLWKRXWWKH DQ\PHULWRUIRUDQ\SXUSRVH7KH$FWDOVRSURWHFWV SULRUFRQVHQWRIWKHFKLOGpVOHJDOUHSUHVHQWDWLYHH[FHSW GDWDEDVHVDQGFRPSXWHUSURJUDPVDORQJZLWKWHFK LQFDVHVVSHFLƄHGE\ODZ QLFDOGRFXPHQWDWLRQDQGXVHUPDQXDOV 7KH $FW DOVR SURYLGHV WKDW JRYHUQPHQW HQWLWLHV H  'RPDLQQDPHV WKURXJKWKHXVHRI,&7VDUHUHTXLUHGWRQRWLI\SHUVRQV that their information will be collected in automated The National Telecommunications Commission ad IRUPVWDWLQJWKHSXUSRVHDQGXVHWKDWZLOOEHPDGHRI PLQLVWHUV DQG PDQDJHV WKH 1HWZRUN ,QIRUPDWLRQ WKHLQIRUPDWLRQDQGZLWKZKRPLWZLOOEHVKDUHG7KH\ &HQWUHRIWKH%ROLYDULDQ5HSXEOLFRI9HQH]XHOD 1,& PXVWVWDWHWKHRSWLRQVDYDLODEOHWRGDWDVXEMHFWVIRU YH  ZKLFK LV UHVSRQVLEOH IRU DVVLJQLQJ YH GRPDLQ H[HUFLVLQJWKHLUULJKWWRDFFHVVUDWLI\GHOHWHRURSSRVH QDPHV ,W KDV DGRSWHG WKH 8QLIRUP 'RPDLQ1DPH the use of their information and the security measures 'LVSXWH5HVROXWLRQ3ROLF\XQGHUZKLFKGLVSXWHVFDQ applied to protect the information, records and ar EHVHWWOHGWKURXJKWKH:,320HGLDWLRQDQG$UELWUD FKLYHVLQWKHGDWDEDVHVRIWKHHQWLWLHVFRQFHUQHG WLRQ&HQWUH ,Q WKH DGPLQLVWUDWLYH UHDOP WKH $GPLQLVWUDWLYH I  &\EHUFULPH 3URFHGXUH(VWDEOLVKLQJWKH*HQHUDO&RQGLWLRQVRI$G PLQLVWUDWLYH3RZHUVRILVVXHGE\WKH1DWLRQDO 2IQRWHLQWKHFULPLQDODUHDLVWKH6SHFLDO$FW$JDLQVW 7HOHFRPPXQLFDWLRQV &RPPLVVLRQ UHTXLUHV ,QWHUQHW &RPSXWHU &ULPH RI  2FWREHU  WKH SXUSRVH VHUYLFHSURYLGHUVWRHQVXUHWKHFRQƄGHQWLDOLW\DQGLQ of which is to provide comprehensive protection of violability of private communications and to adopt the V\VWHPV WKDW XVH LQIRUPDWLRQ WHFKQRORJLHV DQG WR PHDVXUHV QHHGHG WR JXDUDQWHH WKH SURWHFWLRQ DQG SUHYHQWDQGSXQLVKFULPHVDJDLQVWVXFKV\VWHPVRU FRQƄGHQWLDOLW\RIXVHUVpSHUVRQDOGDWD7KH\PXVWQRW any of their components, or actions carried out with XVH VDLG GDWD IRU SXUSRVHV RWKHU WKDQ IRU SURYLGLQJ WKHXVHRIVDLGWHFKQRORJLHV$PRQJWKHFULPHVGH WKH VHUYLFH H[FHSW XSRQ UHFHLYLQJ UHTXHVWV IRU LQ ƄQHG DUH LPSURSHU DFFHVV WR ,7 V\VWHPV VDERWDJH IRUPDWLRQIURPWKH6WDWHpVVHFXULW\DJHQFLHVRURWKHU RUGDPDJHWRWKHPFRPSXWHUHVSLRQDJHDQGIRUJHU\ DXWKRUL]HGHQWLWLHV)DLOXUHWRREVHUYHWKHVHSURYLVLRQV RIHOHFWURQLFGRFXPHQWV7KH$FWDOVRGHƄQHVVDQF LQFXUVDƄQHDQGOHDGVWRWKHUHYRFDWLRQRIWKHDXWKRUL WLRQVIRUYDULRXVFULPHVDJDLQVWSURSHUW\LQSDUWLFXODU WLHVJUDQWHG FULPHVWKDWLQYROYHREWDLQLQJLQIRUPDWLRQEHORQJLQJWR G  ,QGXVWULDODQGLQWHOOHFWXDOSURSHUW\ WKLUGSDUWLHVLQRUGHUWRVWHDOWKHLUSURSHUW\RUDVVHWV 7KH$FWGHƄQHVWKHFULPHVRIIUDXGXVLQJLQIRUPDWLRQ ,QWKHDUHDRILQWHOOHFWXDOSURSHUW\ULJKWVWKH%ROLYDULDQ WHFKQRORJLHVIUDXGXOHQWXVHRIVPDUWFDUGVLPSURSHU 5HSXEOLFRI9HQH]XHODKDVEHFRPHDSDUW\WR'HFL SURYLVLRQRIJRRGVRUVHUYLFHVDQGWKHSRVVHVVLRQRI VLRQ  &RPPRQ ,QGXVWULDO 3URSHUW\ 5HJLPH  DQG HTXLSPHQWIRUIRUJHU\ II. REPORT ON LEGISLATION IN THE LATIN AMERICAN COUNTRIES 65

7KH*HQHUDO$FWRQ%DQNVDQG2WKHU)LQDQFLDO,QVWLWX WURQLF LQIRUPDWLRQ GRFXPHQWV DQG FRPPXQLFDWLRQV WLRQV RI  1RYHPEHU  LQFOXGHV LQ WKH FKDSWHU ,WDXWKRUL]HVWKH2IƄFHRIWKH6XSHULQWHQGHQWRI(OHF on criminal sanctions a number of computer crimes, WURQLF&HUWLƄFDWLRQ6HUYLFHVWRLPSOHPHQWWKH1DWLRQDO LQFOXGLQJ GLVFORVXUH RI FRQƄGHQWLDO LQIRUPDWLRQ FRQ 6\VWHPRI,QIRUPDWLRQ7HFKQRORJ\3URWHFWLRQDQG6H WDLQHGLQ,7PHGLDHOHFWURQLFIUDXGDSSURSULDWLRQRI curity, which is made up of four national subsystems, information on clients, and appropriation of informa QDPHO\ FU\SWRJUDSK\ FRPSXWHU VHFXULW\ LQFLGHQW WLRQE\HOHFWURQLFPHDQV UHVSRQVH 9HQ&(57  IRUHQVLF LQIRUPDWLFV DQG GDWD 7KH 6SHFLDO $FW $JDLQVW &RPSXWHU &ULPH SURYLGHV SURWHFWLRQ VDQFWLRQV IRU FULPHV DJDLQVW FKLOGUHQ DQG DGROHVFHQWV FRQVLVWLQJ RI IXUQLVKLQJ WKHP DFFHVV WR SRUQRJUDSKLF J  3HQGLQJOHJLVODWLRQDQGFKDOOHQJHV PDWHULDORUGLVSOD\LQJSRUQRJUDSKLFLPDJHVRIFKLOGUHQ 2QHRIWKHPDLQFKDOOHQJHVIDFHGE\9HQH]XHODLVWKH RUDGROHVFHQWV$VFULPHVDJDLQVWWKHHFRQRPLFRUGHULW QHHGWRDGRSWJHQHUDOOHJLVODWLRQRQSHUVRQDOGDWDLQ SXQLVKHVYLRODWLRQVRILQWHOOHFWXDOSURSHUW\ULJKWVDQGYLR ODWLRQVRIFRQVXPHUVpULJKWVWKURXJKPLVOHDGLQJRIIHUV order to comply with its commitments as part of the ,EHUR$PHULFDQ'DWD3URWHFWLRQ1HWZRUN,WDOVRQHHGV 7KH$FWPDNHVFULPHVFRPPLWWHGRXWVLGHWKH%ROLYDU to review and update its substantive and procedural LDQ5HSXEOLFRI9HQH]XHODSXQLVKDEOHRQ9HQH]XHODQ OHJLVODWLRQ EHDULQJ LQ PLQG WKH &RXQFLO RI (XURSHpV VRLOZKHQWKH\KDYHKDGHIIHFWVLQ9HQH]XHODDQGZKHQ &RQYHQWLRQ RQ &\EHUFULPH WKH ,EHUR$PHULFDQ &R the responsible party has not been tried for the action RSHUDWLRQ$JUHHPHQWRQ5HVHDUFK8QGHUZULWLQJDQG RUKDVHYDGHGWULDORUVHQWHQFLQJE\IRUHLJQFRXUWV 2EWDLQLQJ (YLGHQFH RQ &\EHUFULPH DQG WKH UHFRP ,Q UHJDUG WR VHFXULW\ RI LQIRUPDWLRQ WKH ,QIRJRYHUQ PHQGDWLRQRIWKH&RQIHUHQFHRI0LQLVWHUVRI-XVWLFH PHQW$FWUHTXLUHVWKDWHOHFWURQLFDFWLRQVFDUULHGRXW RI ,EHUR$PHULFDQ &RXQWULHV RQ WKH 'HƄQLWLRQ DQG E\JRYHUQPHQWHQWLWLHVPXVWJXDUDQWHHWKHLQWHJULW\ 3XQLVKPHQW RI &\EHUFULPH RI ZKLFK 9HQH]XHOD LV D FRQƄGHQWLDOLW\ DXWKHQWLFLW\ DQG DYDLODELOLW\ RI HOHF PHPEHU

Layout and Printing at United Nations, Geneva – 1529154 (E) – September 2016 – 313 – UNCTAD/DTL/STICT/2015/4