---
title: "#ElSalvador 🇸🇻 #BDS_Informs: New Personal Data Protection Rules for Private Companies"
description: New Rules
---

[BDS Publications](https://publicaciones.bdsasesores.com/en-us/blog)

# [#ElSalvador 🇸🇻 #BDS\_Informs: New Personal Data Protection Rules for Private Companies](https://publicaciones.bdsasesores.com/en-us/blog/new-personal-data-protection-rules-for-private-companies)

 Written by [BDS Asesores](https://publicaciones.bdsasesores.com/en-us/blog/author/bds-asesores) | Oct 6, 2026, 8:39:54 PM

Last week, the Legislative Assembly approved a series of amendments to the *Personal Data Protection Act* (LPDP). Under these changes, private companies **are no longer required** to appoint **a Personal Data Protection Officer.**

However, **companies remain subject to the Law** and continue to have the responsibilities established under the LPDP. Accordingly, they will be required to directly manage requests relating to **ARCO-POL rights.**

**Key Considerations for Companies**

Following these amendments, organizations must:

- Internally designate the person or department responsible for handling such data subject requests.
- Establish formal mechanisms for receiving, processing, and responding to ARCO-POL requests within statutory deadlines.
- Update their privacy notices to reflect the available channels for submitting these requests.
- Maintain clear procedures and records that properly document how requests are handled and resolved.

ARCO-POL requests must be resolved within a  **20 business days period**, which may be extended for up to an additional 20 business days under justified circumstances.

Please note that removing the requirement to appoint a Personal Data Protection Officer **does not exempt private companies from complying with all other provisions of the LPDP.**

The decree will enter into force eight days after its publication in the *Official Gazette*.

Please do not hesitate to contact us should you have any questions regarding this matter.

[View full post](https://publicaciones.bdsasesores.com/en-us/blog/new-personal-data-protection-rules-for-private-companies)

```json
{
  "@context" : "http://schema.org",
  "@type" : "BlogPosting",
  "author" : {
    "@type" : "Person",
    "name" : "BDS Asesores"
  },
  "dateModified" : "2026-10-06T20:39:54.455Z",
  "datePublished" : "2026-10-06T20:39:54Z",
  "headline" : "#ElSalvador 🇸🇻 #BDS_Informs: New Personal Data Protection Rules for Private Companies",
  "image" : {
    "@type" : "ImageObject",
    "height" : 3375,
    "url" : "https://6302490.fs1.hubspotusercontent-na1.net/hubfs/6302490/verification-information-with-finger-print-by-smart-phone.jpg",
    "width" : 6000
  },
  "mainEntityOfPage" : "https://publicaciones.bdsasesores.com/en-us/blog/new-personal-data-protection-rules-for-private-companies",
  "publisher" : {
    "@type" : "Organization",
    "logo" : {
      "@type" : "ImageObject",
      "height" : 60.0,
      "url" : "https://cdn2.hubspot.net/hubfs/6302490/logo%20BDS.jpg",
      "width" : 60.0
    },
    "name" : "Company labor issues"
  }
}
```