According to the SIC, the establishments that request personal data must:
- COMPLY WITH the regulation of personal data processing. The resolutions of the Ministry of Health and Social Protection do not suspend the fundamental right to data protection.
- When collecting personal data, it should be taken into account that:
- INFORM citizens of the specific rule that orders the collection of data and keep said information visible and available.
- IMPLEMENT the technical, human and administrative measures that are necessary to grant security to personal data, avoiding its adulteration, loss, consultation or unauthorized or fraudulent access.
- INFORM citizens about the Information Processing Policy (PTI), which must include the mechanisms and procedures for people to exercise their rights to know, update, rectify and / or delete their data.
- LIMIT the temporality of the data collected to comply with the biosafety protocols issued by the Ministry of Health and Social Protection, which may only be stored for the reasonable time necessary to comply with said protocols. Once the purpose has been fulfilled, the Responsible for the Processing of Personal Data must ex officio delete the data collected.
- GUARANTEE the security of sensitive data, the collection, use, circulation and treatment of these must be surrounded by special care and diligence in their collection, use, security and / or any other activity performed with them. It should be noted that NO activity may be conditioned on the owner providing sensitive personal data.
- REGISTER the databases in the Superintendence of Industry and Commerce, in the event that new databases are created to comply with the protocols, these must be registered before the National Registry of Databases (RNBD) two months later of its creation.
The instructions given by the Superintendence of Industry and Commerce are preventive and mandatory and of immediate execution, Non-compliance and non-observance of these instructions can be reported to this Authority, in addition to leading to the initiation of administrative investigations.