El Salvador’s Legislative Decree No. 144, known as the “Personal Data Protection Law” (the Law), came into effect on 23 November 2024. This law applies to both the public and private sectors, marking the country’s first specific legislation on this matter after President Nayib Bukele vetoed a similar initiative in May 2021. The Law shares structural and thematic similarities with other Latin American data protection laws, covering data collection and processing, data subject rights, and cross-border data transfers. However, it also includes unique aspects that must be considered when implementing business initiatives in this Central American country.