Cuba: Implemented Personal Data Protection Law including data protection regulation

On 21 February 2023, the Personal Data Protection Law (Ley 149) comes into force, 180 days after its publication in the Official Gazette. T The Act aims to ensure that the processing of personal data complies with specific mandatory requirements. Furthermore, the Act codifies the rights of data subjects when their data gets processed. Finally, the Act also contains provisions regarding the sanctions for non-compliance, including fines of up to CUP 20'000 for violating parts of the Law, temporary suspension of the database for five days and its ultimate closure.