Relevant Aspects:
The SPDP issued a new statement reaffirming and expanding key interpretative criteria for the application of the Organic Law on Personal Data Protection (“LOPDP”) and its General Regulations (“RLOPDP”); in particular, regarding the disqualifications and incompatibilities applicable to the role of Personal Data Protection Officer.
Inquiry Submitted:
The inquiry raised the following question: If a person holding the position of Compliance Officer, Information Security Officer, or acting as Special Attorney for a foreign data controller or processor was appointed as Personal Data Protection Officer prior to the issuance of Resolution No. SPDP-SPD-2025-0028-R, may that person continue to serve as Personal Data Protection Officer?
Ruling:
The SPDP determined that such appointments are not valid. According to the analysis conducted, the duties performed by Compliance Officers, Information Security Officers, and Special Attorneys fall within the grounds for disqualification established in Article 56 of the Regulations to the LOPDP, due to conflicts of interest and lack of functional independence from the data controller or processor.
Relevance of the Ruling:
• No person holding any of the aforementioned positions may be appointed or continue to serve as Personal Data Protection Officer.
• This incompatibility applies even to appointments made prior to the entry into force of Resolution No. SPDP-SPD-2025-0028-R.
• Private sector organizations must rectify any appointments that contravene these provisions by December 31, 2025, the deadline established for the registration of Personal Data Protection Officers before the SPDP.
At BUSTAMANTE FABARA, we will continue to share specialized analyses on the practical application of these regulatory instruments and their implications for the various regulated sectors.
For additional information, please contact us at the following email addresses:
Dr. María Rosa Fabara Vera: mrfabara@bustamantefabara.com
Esteban Dávila: edavila@bustamantefabara.com
Rafael Gabela: rgabela@bustamantefabara.com
Marco Sánchez: msanchez@bustamantefabara.com