Skip to main content
Cuba · Reviewed October 2026

What Is Law No. 149/2022 on the Protection of Personal Data?

Cuba's Law No. 149/2022 is a general personal-data law covering public and private processing. The law assigns compliance control to the Ministry of Justice (MINJUS) and states rights relating to access, nondisclosure, correction or updating, cancellation, and conditional opposition. Requests are made first to the controller. The supplied research summary states that the controller has up to five business days to decide and ten business days to implement the decision, subject to one equal extension. This is a source-backed evidence profile based on the supplied materials. No separate direct-marketing opt-out, dedicated MINJUS privacy complaint form or service level, consolidated amendment history, or Cuba-specific data-broker route was located in this pass.

Rahul Kandoriya
Written byRahul Kandoriya·Founder, OfflistMe·Last updated October 9, 2026

At a glance

Full name
Law No. 149/2022 on the Protection of Personal Data
Short code
Cuba Law 149/2022
Jurisdiction
Cuba
Enacted
2022
Regulator
Ministry of Justice (MINJUS)
Private right of action
Limited

Scope, who Cuba Law 149/2022 covers

Public- and private-sector personal-data processing addressed by Law No. 149/2022. The bounded source review did not establish a fuller territorial, sectoral, or exemption map.

Protected data

Personal data within the scope of Law No. 149/2022; the reviewed summary did not itemize a more detailed category list.

Data subject rights

Right of access

Right to nondisclosure, as stated in the reviewed law materials

Right to correction or updating

Right to cancellation

Conditional right to oppose processing

Notable features

The supplied summary identifies a five-business-day decision period and ten-business-day implementation period, each subject to one equal extension. A consolidated amendment history was not located.

Enforcement & penalties

Regulator: Ministry of Justice (MINJUS)

Penalties: The supplied research summary did not provide a consolidated penalty schedule; no penalty figure is stated here without a separate review of the controlling text.

Private right of action: The located process starts with a request to the controller. No dedicated MINJUS privacy complaint form or service-level agreement, or separate private damages route, was located in this bounded pass.

Relevance to data brokers

No Cuba-specific data-broker, people-search, or public-record removal route was located. The supported general route is to begin with the controller, subject to the law’s stated rights and conditions.

Generate requests in under 60 seconds

Explore 1,034 US/global data brokers

OfflistMe helps draft opt-out requests using the details you choose. Paid one-time plans start at $9 and include 5, 50 or 500 credits (1 credit = one run that generates removal requests for all available data brokers). Review the provider route and legal basis, then send from your own inbox. The tool is not legal advice and does not guarantee a broker's response.

FAQ

What rights does Cuba’s Law No. 149/2022 state?+

The reviewed materials identify access, nondisclosure, correction or updating, cancellation, and conditional opposition rights.

How long does a Cuban controller have to decide a rights request?+

The supplied summary states up to five business days for a decision and ten business days for implementation, subject to one equal extension.

Does Cuba have a data-broker opt-out route?+

No Cuba-specific data-broker, people-search, or public-record removal route was located in this bounded pass.

Official sources & citations

Other international privacy regimes

Cuba Law 149/2022 sits in a global ecosystem of data-protection laws. Start with these comparative frameworks, or visit the privacy research hub for the complete jurisdiction index:

Related concepts & guides