Ecuador Organic Law on Personal Data Protection
National data-protection law: technical safeguards, records of processing software, third-party/processor accountability, and integrity controls.
National data-protection law: technical safeguards, records of processing software, third-party/processor accountability, and integrity controls.
| Short name | EC LOPDP |
| Region | Americas |
| Country or scope | Ecuador |
| Sector | Privacy |
| In your workspace | Off until you switch it on in Compliance › Manage. |
How Safeguard covers EC LOPDP
- Scan requirements: 6, all decided by a scan.
- Controls: the scan requirements below.
- Automated tests: none map to it directly. You can link any automated test to its controls yourself (how).
- Policy templates: 22 from the standard set.
How each kind of coverage works, and what the readiness score counts: Compliance frameworks.
What a scan checks
Each scan of a product checks these 6 requirements against what the scan found, including the product's software inventory (SBOM).
| Requirement | What Safeguard checks | Decided by |
|---|---|---|
EC-LOPDP-37 Personal Data Security Measures | Controllers and processors must implement technical, organisational and legal measures ensuring integrity, confidentiality and availability of personal data, evidenced by integrity hashes on processing-system components (LOPDP 2021, Art. 37 data-security obligations) | Scan |
EC-LOPDP-BRN Security Breach Notification Readiness | Security breaches affecting personal data must be notified to the Superintendence and affected data subjects within short statutory deadlines, which requires components to be immediately identifiable (LOPDP 2021, breach-notification provisions, Arts. 43-46 range) | Scan |
EC-LOPDP-REC Accountability and Processing Records | The accountability (responsabilidad proactiva) principle requires controllers to document and demonstrate their processing, which presupposes an inventory of the software systems involved (LOPDP 2021, accountability principle and record duties) | Scan |
EC-LOPDP-PROC Processor (Encargado) Oversight | Processing by an encargado must occur under a binding contract with sufficient guarantees, so third-party software components must carry named suppliers (LOPDP 2021, controller-processor provisions) | Scan |
EC-LOPDP-VER Known Software Versions | Risk-based security and breach-impact analysis require exact versions of software components to be recorded (LOPDP 2021, risk-analysis and security-measure duties) | Scan |
EC-LOPDP-DOC Demonstrable Documentation | Demonstrating compliance to the Superintendence requires software records to be identifiable, timestamped documents with a recorded creator (LOPDP 2021, compliance-demonstration duties) | Scan |
Policy templates
All 22 from the standard set, adapted to EC LOPDP.
Dominican Republic Law No. 172-13 on Personal Data
National data-protection law: technical safeguards, records of processing software, third-party/processor accountability, and integrity controls.
El Salvador Cybersecurity and Information Security Law 2024
National cybersecurity framework: software asset inventory, component integrity, supply-chain verification, and vulnerability management.