Key Aspects:
The Superintendency for Personal Data Protection (“SPDP”) issued its first administrative sanctions for serious infringements of the Organic Law on Personal Data Protection (“LOPDP”), after concluding sanctioning proceedings against the Ecuadorian Professional Football League (“LIGAPRO”) and the Ecuadorian Football Federation (“FEF”). Both cases are related to the processing of personal data through the Fan ID and Fan FEF applications.
Findings and legal basis
Following information requests, preliminary actions, and on-site inspections, the SPDP identified non-compliance with corrective measures and verified the existence of a serious infringement as provided for in Article 68.1 of the LOPDP.
Sanctions imposed
- Ecuadorian Professional Football League (LIGAPRO)
- Fine: USD 259,644.01
- Additional obligations:
- Notify 14,398 data subjects that their consent was not validly obtained.
- Delete such data from all its databases.
- Ecuadorian Football Federation (FEF)
- Fine: USD 194,856.16
- Additional obligations:
- Update its Record of Processing Activities.
- Implement a Personal Data Protection Policy in accordance with the LOPDP.
- Notify data subjects of the invalidity of the consent obtained.
- Delete the data processed through the Fan FEF application.
Publication of decisions
The SPDP stated that the full decisions — including legal grounds, technical findings, and procedural actions — will be available on its institutional website.
Institutional relevance
These decisions constitute a key precedent in the enforcement of the LOPDP and send a clear message to data controllers and processors: the management of personal data must be carried out with rigor, transparency, and proactive accountability.
The SPDP reiterated that it will continue to act in strict compliance with due process to ensure the effective protection of citizens’ rights.
At BUSTAMANTE FABARA, we will continue to share specialized analyses on the practical application of these regulatory instruments and their implications for the various regulated sectors.
Should you require additional information, please contact the following email addresses:
Dr. María Rosa Fabara Vera: mrfabara@bustamantefabara.com
Esteban Dávila: edavila@bustamantefabara.com
Rafael Gabela: rgabela@bustamantefabara.com