AD — Country Profile

Andorra

5TOTAL
0OFFICIAL SOURCES
1TOPIC AREAS
Law / Act1
Standard / Framework2
International Agreement1
Other1
15 JUL 2024 · International Agreement

Ibero-American General Secretariat and Ibero-American Data Protection Network memorandum of understanding on data protection cooperation

On 15 July 2024, the Ibero-American Data Protection Network (RIPD), led by the National Institute for Transparency, Access to Information and Personal Data Protection (INAI), and the Ibero-American General Secretariat (SEGIB) signed a memorandum of understanding on data protection cooperation across Ibero-America. The memorandum establishes a collaborative framework for information exchange, technical assistance, and the development of public policies and regulations concerning personal data ...

Secondary evidenceNational StrategyIssuing institution: Issuing authority not identified
24 JAN 2024 · Standard / Framework

APDA Guidelines on Use of Cookies, Privacy Policy, and Legal Notice

On 24 January 2024, the Andorran Data Protection Agency (APDA) updated its guidelines titled "Use of Cookies, Privacy Policy, and Legal Notice" to incorporate the European Data Protection Board (EDPB) Guidelines on Deceptive Design Patterns in Social Media Platform Interfaces and Guidelines on the Technical Scope of Article 5(3) of the ePrivacy Directive. The amendments emphasise the restriction of cookie storage time to a maximum of 25 months, provide conditions for obtaining consent from mi...

Secondary evidenceNational StrategyIssuing institution: Issuing authority not identified
05 AUG 2023 · Other

Ibero-American Network investigation into ChatGPT data processing practices

On 8 May 2023, the Ibero-American Network for the Protection of Personal Data (RIPD) adopted coordinated measures regarding the investigation into OpenAI's platform ChatGPT data processing practices. The RIPD alleges that the ChatGPT platform may pose risks to users' rights and freedoms. The data protection authorities that are part of RIPD will asses the ChatGPT legal basis for processing personal data, compliance with transparency requirements regarding the processing, potential transfers o...

Secondary evidenceNational StrategyIssuing institution: Issuing authority not identified
25 MAR 2023 · Law / Act

Data protection regulations in Ibero-American Charter of Principles and Rights in Digital Environments

On 25 March 2023, the Ibero-American Charter of Principles and Rights in Digital Environments was adopted. The charter aims to promote common principles that states should consider when adopting or adjusting national laws and implementing public policies regarding protecting rights and fulfilling responsibilities in digital environments. It applies to businesses, civil society, and state bodies. The charter emphasises the importance of making significant efforts to safeguard people's privacy ...

Secondary evidenceNational StrategyIssuing institution: Issuing authority not identified
27 SEP 2022 · Standard / Framework

Ibero-American Data Protection Network guidance on standard contractual clauses for cross-border data transfer

On 27 September 2022, the Ibero-American Data Protection Network, including the Data Protection Authorities from Spain, Portugal, Mexico, Argentina, and Brazil, issued guidance on implementing standard contractual clauses for cross-border data transfers. The guide outlines the technical aspects that have to be met by entities transferring personal data to jurisdictions within the Ibero-American Data Protection Network. Furthermore, the guide lists the requirements that entities have to comply...

Secondary evidenceNational StrategyIssuing institution: Issuing authority not identified