CiberLATAMbywhalemate

Paraguay advances fiscal data sharing

Paraguay’s data law takes effect in 2027 as banks and tax officials move toward traceable information sharing, while Ueno Bank stays under scrutiny.

Whalemate Labs · AI-assisted researchPublished:3 min read

Paraguay’s Personal Data Protection Law No. 7593/2025 will take effect on Nov. 27, 2027, and it creates a National Personal Data Protection Agency within the Ministry of Information and Communication Technologies. At the same time, DNIT and banks are moving toward a traceable exchange of tax and banking information, amid debate over the BCP’s oversight of Ueno Bank.

Paraguay’s Personal Data Protection Law No. 7593/2025 will take effect on Nov. 27, 2027, and it creates a National Personal Data Protection Agency within the Ministry of Information and Communication Technologies. At the same time, DNIT is advancing with banks on a framework for exchanging tax and banking information that, according to reports, will require the taxpayer’s express authorization in some cases and will leave a record of each query.

What changes with the new data law?

Law No. 7593/2025 establishes a personal data protection framework and places the National Personal Data Protection Agency within the structure of Mitic. Its effective date is set for Nov. 27, 2027, according to information published by Revista PLUS.

That new framework comes as broader debate continues over what information can move between private entities and public agencies, and under what conditions. In that context, specialists cited by La Nación warned that the risk in data handling varies depending on the regulated actor, and that credit bureaus and entities with credit information already face stricter oversight requirements than other sectors.

What does the DNIT and Asoban agreement allow?

According to DNIT, the agreement with Asoban will allow banks to consult their customers’ sworn tax filings, especially VAT returns, only with the taxpayer’s express authorization. In return, DNIT will receive banking information it requests during an audit process more quickly.

Residir en Paraguay added that the system will include audit logs to show who checked what and when. The DNIT-Asoban digital platform is still in the technical phase, and the official expectation is that it will begin operating in the first half of 2027, with a transition period in which manual and electronic reports will coexist.

How does the BCP fit into this picture?

The Central Bank of Paraguay already has a resolution that regulates security procedures for transactions carried out through electronic means, aimed at the financial system under its supervision. That rule now intersects with a public discussion about the strength of prudential controls in the system.

On Sept. 3, 2026, ABC Color reported that findings on Ueno Bank S.A.’s financial statements raised questions about the accounting, prudential and supervisory criteria applied by the BCP across the financial system. Two days later, ruling-party senators Basilio Núñez, Antonio Barrios and Natalicio Chase introduced a draft resolution asking the BCP for a detailed report on the bank.

What was said about Ueno Bank?

ABC Color reported on Sept. 7, 2026 that a leaked so-called Rivarola report exposed a conflict of technical criteria inside the BCP, and that alerts about Ueno Bank S.A.’s financial statements had been documented by state oversight bodies. In another article, the outlet said Antonio Barrios’ request-for-information bill mentions transactions with related parties and companies linked to Grupo Vázquez.

The public reaction also brought political clashes. Rafael Filizzola accused the BCP of easing requirements, hiding balance sheets and removing superintendents who issued negative opinions on Ueno Bank S.A., while suggesting the possibility of preferential treatment backed by the government.

In response to those claims, Ueno Bank said in La Tribuna on Sept. 8 and 9, 2026, that it complies with the applicable legal and regulatory limits and requirements, that it operates as a systemic bank under strict BCP supervision, and that it maintains an ongoing relationship with the authority through ordinary supervision processes.

Sources

View all