Cuba · Reviewed September 2026

What Is Law No. 149/2022 on the Protection of Personal Data?

Cuba's Law No. 149/2022 is a general personal-data law covering public and private processing. The law assigns compliance control to the Ministry of Justice (MINJUS) and states rights relating to access, nondisclosure, correction or updating, cancellation, and conditional opposition. Requests are made first to the controller. The supplied research summary states that the controller has up to five business days to decide and ten business days to implement the decision, subject to one equal extension. This is a source-backed evidence profile based on the supplied materials. No separate direct-marketing opt-out, dedicated MINJUS privacy complaint form or service level, consolidated amendment history, or Cuba-specific data-broker route was located in this pass.

Written byRahul Kandoriya·Founder, OfflistMe·Last updated September 6, 2026

At a glance

Full name: Law No. 149/2022 on the Protection of Personal Data
Short code: Cuba Law 149/2022
Jurisdiction: Cuba
Enacted: 2022
Regulator: Ministry of Justice (MINJUS)
Private right of action: Limited
Statutory citation: Law No. 149/2022 on the Protection of Personal Data

Scope, who Cuba Law 149/2022 covers

Public- and private-sector personal-data processing addressed by Law No. 149/2022. The bounded source review did not establish a fuller territorial, sectoral, or exemption map.

Protected data

Personal data within the scope of Law No. 149/2022; the reviewed summary did not itemize a more detailed category list.

Data subject rights

Right of access

Right to nondisclosure, as stated in the reviewed law materials

Right to correction or updating

Right to cancellation

Conditional right to oppose processing

Notable features

The supplied summary identifies a five-business-day decision period and ten-business-day implementation period, each subject to one equal extension. A consolidated amendment history was not located.

Enforcement & penalties

Regulator: Ministry of Justice (MINJUS)

Penalties: The supplied research summary did not provide a consolidated penalty schedule; no penalty figure is stated here without a separate review of the controlling text.

Private right of action: The located process starts with a request to the controller. No dedicated MINJUS privacy complaint form or service-level agreement, or separate private damages route, was located in this bounded pass.

Relevance to data brokers

No Cuba-specific data-broker, people-search, or public-record removal route was located. The supported general route is to begin with the controller, subject to the law’s stated rights and conditions.

Generate requests in under 60 seconds

Generate removal requests for 1,034 US/global profiles, $9

OfflistMe helps draft opt-out requests using the details you choose. Review the provider route and legal basis, then send from your own inbox. The tool is not legal advice and does not guarantee a broker's response.

Generate My Opt-Out Requests

FREE

FAQ

What rights does Cuba’s Law No. 149/2022 state?+

The reviewed materials identify access, nondisclosure, correction or updating, cancellation, and conditional opposition rights.

How long does a Cuban controller have to decide a rights request?+

The supplied summary states up to five business days for a decision and ten business days for implementation, subject to one equal extension.

Does Cuba have a data-broker opt-out route?+

No Cuba-specific data-broker, people-search, or public-record removal route was located in this bounded pass.

Official sources & citations

Other international privacy regimes

Cuba Law 149/2022 sits in a global ecosystem of data-protection laws. Compare with other jurisdictions that shape cross-border data flows:

Related concepts & guides

Privacy research hubBrowse every law explainer and source ledger Data removal by countryBrowse jurisdiction-specific removal guides US Privacy Laws MatrixAll US state laws compared What is GDPR?EU framework What is CCPA?California baseline What is a data broker?Full explainer Privacy glossaryTerms defined What is GPC?Browser opt-out signal What is FCRA?US consumer reporting law What is FTC Act §5?US privacy enforcement Check broker exposureSee which brokers may have your info One-time data removalPay once, no subscription needed Start for $9Prepare reviewable removal requests