El Salvador's Data Protection Law introduces cutting-edge aspects compared to other personal data protection regulations currently in force in Central America\u2014such as those of the Republics of Panama and Costa Rica\u2014which do not have them, such as the mandatory designation of a Data Protection Officer (DPO) for certain types of organizations.<\/p>\n\n\n\n
According to the guidelines published on August 11, 2026, in the Official Gazette of the Republic of El Salvador, among the most important aspects of El Salvador's Data Protection Law are:<\/p>\n\n\n\n
The appointment of the Data Protection Officer<\/a> is regulated by El Salvador's Data Protection Law and applies to both public and private entities. The DPO will primarily be responsible for handling all requests from natural or physical persons related to their ARCO-POL rights (access, rectification, cancellation, opposition, portability, erasure, and limitation).<\/p>\n\n\n\n The DPO must meet, among others, the following requirements:<\/p>\n\n\n\n The appointment must be formally recorded through an agreement, resolution, or minutes issued by the highest competent authority of the institution or company. The document must include the identification of the designee, legal grounds, powers, and the start date of functions. <\/p>\n\n\n\n Before accepting the position, the appointed person must submit a declaration regarding potential conflicts of interest. <\/p>\n\n\n\nMain requirements for the candidate to fill the DPO position<\/h3>\n\n\n\n
\n
Formalization of the appointment<\/h3>\n\n\n\n
Declaration of Conflict of Interest<\/h3>\n\n\n\n
Registration with the Authority<\/h3>\n\n\n\n