The National Assembly announced that its President, Gabriela Rivadeneira, presented a bill on the Protection of Privacy and Personal Data. The Bill sets out the rationale behind its introduction, highlighting that there is a necessity in Ecuador to regulate the public and private use of personal information and start an awareness process on the same in order to tackle the risks that the development and expansion of information technology and communications bring. “There is a lack of data protection culture in Ecuador,” said Mario Flor, Partner at Bustamante & Bustamante. In particular, the Bill provides for data subject rights with regards to the use and processing of their data, including provisions on access, rectification, erasure, and consent. Specifically, the Bill requires organisations to obtain prior consent of the data subject before collecting and using data.