Puerto Rico Takes Steps to Protect Consumer Data

The government of Puerto Rico has implemented several measures to safeguard consumer data and ensure the protection of personal information.

Biometric Information Privacy Act

The Biometric Information Privacy Act requires companies to obtain written consent from individuals before collecting their biometric data, such as fingerprints, iris scans, and facial recognition technology. Companies are also mandated to disclose any third parties with whom they share this sensitive information.

Regulations for Biometric Data Protection

Puerto Rico has adopted regulations related to biometric data protection, including Regulation No. 8766, which establishes rules for advanced electronic signatures based on biometrics.

Credit Reporting Agencies

The government regulates credit reporting agencies through the Fair Credit Reporting Act (FCRA) of Puerto Rico and the Office of the Commissioner of Financial Institutions (OCFI). These laws ensure that credit reporting agencies maintain the accuracy, fairness, and confidentiality of consumer information.

Education Programs for Consumers

Consumers in Puerto Rico can learn more about protecting their personal data through various education programs and resources. The Office of the Commissioner of Financial Institutions provides educational materials and workshops on identity theft prevention and protection, while the Federal Trade Commission offers a dedicated website with information and resources on preventing, detecting, and recovering from identity theft.

• The Puerto Rico Department of Consumer Affairs also offers workshops and seminars on consumer rights and protection against fraud and identity theft.
• Local non-profit organizations, such as Centro de Estudios y Adiestramiento en Patronato Inc., offer free courses on financial education, including topics related to protecting personal data.

Protection Against Discrimination

Puerto Rico’s laws protect individuals from discrimination based on their personal data. The Anti-Discrimination Law prohibits discrimination in employment and housing based on certain protected characteristics, while the Data Privacy Law requires businesses to obtain consent before collecting certain types of personal information.

• The Equal Credit Opportunity Act also prohibits credit and lending discrimination based on race, color, religion, national origin, sex, marital status, age, or public assistance.
• The Fair Housing Act prohibits housing discrimination based on race, color, religion, sex, national origin, disability, or familial status.

Designated Privacy Officer

All companies operating in Puerto Rico are required to have a designated privacy officer responsible for implementing and enforcing data privacy and security compliance. Failure to designate a privacy officer can result in fines or penalties under the law.

Protecting Individual Privacy Rights

In cases where law enforcement agencies request access to consumer data, Puerto Rico’s laws ensure that individual privacy rights are protected. Law enforcement agencies must follow established procedures to access consumer data, which includes obtaining necessary warrants and ensuring that all requests are reasonable and lawful.

By implementing these measures, the government of Puerto Rico is taking a proactive approach to protecting consumer data and promoting transparency in how companies handle personal information.