HOME/All Jurisdictions/CU

CU — Country Profile

Cuba

2TOTAL
0OFFICIAL SOURCES
1TOPIC AREAS
Law / Act2
21 FEB 2023 · Law / Act

Cross-border data transfer regulation in Personal Data Protection Law (Ley 149)

On 21 February 2023, the Personal Data Protection Law (Ley 149) including provisions for cross-border data transfer comes into force 180 days after its publication in the Official Gazette. The Act outlines five specific reasons for data transfers outside the country. The cross-border data transfer is therefore only allowed in the case of international judicial cooperation, exchange of medical data when necessary for the treatment of the data subject, bank or stock exchange transfers about the...

Secondary evidenceNational StrategyIssuing institution: Issuing authority not identified
21 FEB 2023 · Law / Act

Cybersecurity requirements in Personal Data Protection Law (Ley 149)

On 21 February 2023, the Personal Data Protection Law (Ley 149) comes into force 180 days after its publication in the Official Gazette. The Act states that entities collecting and storing personal data have to implement preventive and responsive security measures to ensure the protection of the data collected. Furthermore, the Act specifies that entities must implement technical measures to allow for processing personal data in electronic form and notify the authorities of data breaches.

Secondary evidenceNational StrategyIssuing institution: Issuing authority not identified