Dominican Republic Law 172-13
Law 172-13 on the Protection of Personal Data
Dominican Republic's data protection law establishing Habeas Data remedy but lacking dedicated supervisory authority.
Jurisdiction
Dominican Republic
Enacted
Dec 13, 2013
Effective
Jan 13, 2014
Enforcement
Courts (no dedicated DPA)
No dedicated supervisory authority - enforcement through courts
Headrick Law Firm AnalysisWhy It Matters
Dominican Republic's Habeas Data remedy provides constitutional-level data protection enforcement pathway for AI chatbot users.
At a Glance
Applies to
Requires
Who Must Comply
- Data controllers and processors in Dominican Republic
- Entities processing data of Dominican residents
- Public and private sector
Obligations fall on:
Safety Provisions
- Habeas Data constitutional remedy available
- Right to access, rectification, and deletion
- Consent requirements for data processing
- Security measures for personal data
Compliance & Enforcement
Penalties
Civil remedies through Habeas Data action
Private Right of Action
Individuals can sue directly without waiting for regulatory action.
View on map
Dominican Republic
Focus Areas
General regulation
Cite This
APA
Dominican Republic. (2013). Law 172-13 on the Protection of Personal Data.
Related Regulations
Uruguay Law 18.331
Uruguay's comprehensive data protection law with EU adequacy status. Establishes automated decision-making rights and requires explicit consent for sensitive data.
CARICOM CCSCAP 2025
CARICOM's 2025 regional cyber security framework establishing digital safety culture and coordinated incident response across 18 member states.
Chile Cybersecurity Law
First cybersecurity framework law in Latin America (Law 21,663 promulgated Mar 26, 2024; published Apr 8, 2024). Creates National Cybersecurity Agency (ANCI), mandatory incident reporting, and encryption rights.
Argentina AI Strategy
Non-binding AI governance guidelines establishing principles for responsible AI use. Argentina positioning as AI innovation hub with limited regulatory barriers. Emphasizes transparency, accountability, and human oversight. Multiple legislative proposals pending inspired by EU AI Act, aiming to establish formal regulatory authority.
AIDA
Would have regulated high-impact AI systems with potential penalties up to $25M or 5% global revenue. Part of Bill C-27 which died when Parliament ended.
Brazil ECA Digital
Comprehensive child digital safety law applying to any IT product or service directed at or likely to be accessed by minors in Brazil, with extraterritorial reach.
Last updated January 22, 2026. Verify against primary sources before relying on this information.