Abstract

VELASCO-URGILES, Sebastián Gonzalo; PROANO-REYES, Gladis Margo  and  CASTRO-SANCHEZ, Fernando de Jesús. Best practices for personal data protection. Noesis [online]. 2025, vol.7, n.esp2, pp.794-813.  Epub Dec 31, 2025. ISSN 2739-0365.  https://doi.org/10.35381/noesisin.v7i2.618.

This article proposes a set of best practices in personal data protection for those who, according to the law, are not required to appoint a Data Protection Officer (DPO). Although exempt from this requirement, the relevance of the issue, driven by the Organic Law on Personal Data Protection, means that these organizations are called upon to adopt measures in this regard. Using a qualitative methodology and a non-experimental design, common deficiencies in this area in the private sector are identified. Based on a documentary analysis and interviews with experts, a guide to best practices is structured that is understandable and accessible. This proposal seeks to strengthen regulatory compliance and foster an organizational culture of data protection, demonstrating that proper management of personal information is essential to building trust and security in Ecuador's digital ecosystem.

Keywords : Data protection; legal compliance; best practices; data security; right to privacy; information management..

        · abstract in Spanish     · text in Spanish     · Spanish ( pdf )