Personal Data Protection Law

The Personal Data Protection Law was issued by Royal Decree No. 6/2022. It aims to protect individuals' personal data by establishing several controls for its processing, most notably requiring the controller or processor to obtain the consent of the personal data owner before processing their data. It also grants the personal data owner several rights, most notably the right to revoke their consent, request the modification, update, or deletion of their data, and to be notified of any breach or violation of their personal data. Click here to download a copy of the Personal Data Protection Law