Personal Data Protection and Artificial Intelligence in Ecuador: Legal Challenges for Guaranteeing the Right to Privacy in Public Administration
DOI:
https://doi.org/10.70577/asce.v5i3.1000Keywords:
artificial intelligence; personal data protection; privacy; public administration; digital law.Abstract
Artificial intelligence (AI) has transformed public administration through process automation, large-scale data analysis, and enhanced decision-making. However, its implementation poses significant challenges to the protection of personal data and the safeguarding of the right to privacy, particularly when automated decision-making systems process sensitive citizen information. The aim of this study was to analyze the main legal challenges faced by Ecuador in guaranteeing the right to privacy in the context of artificial intelligence use within public administration. A narrative literature review was conducted using scientific articles, specialized books, national and international regulations, and institutional documents published by international organizations. The literature search was carried out in Scopus, Web of Science, SciELO, Redalyc, Dialnet, and Google Scholar, prioritizing publications from 2020 to 2025. The findings indicate that artificial intelligence provides significant opportunities for public sector modernization while simultaneously increasing risks related to automated personal data processing, algorithmic opacity, profiling, discrimination, and the lack of effective oversight mechanisms. Furthermore, Ecuador's Organic Law on Personal Data Protection represents an important legal milestone; nevertheless, regulatory gaps remain regarding AI governance, algorithmic transparency, and liability arising from automated decision-making. It is concluded that Ecuador should strengthen its legal framework by adopting specific regulations on artificial intelligence, promoting transparency, human oversight, accountability, and privacy-by-design principles to ensure the effective protection of the right to privacy within public administration.
Downloads
References
Asamblea Nacional del Ecuador. (2021). Ley Orgánica de Protección de Datos Personales. Registro Oficial Suplemento No. 459.
Brussels Privacy Hub. (2025). Data protection and data law in South America: An overview. Vrije Universiteit Brussel. https://brusselsprivacyhub.com/wp-content/uploads/2025/03/Data-Protection-and-Data-Law-in-South-America.-An-overview-by-BL-v2.pdf
Bygrave, L. (2020). Article 22 automated individual decision-making, including profiling. En C. Kuner, L. Bygrave, C. Docksey, & L. Drechsler (Eds.), The EU General Data Protection Regulation (GDPR): A commentary (pp. 526–541). Oxford University Press. DOI: https://doi.org/10.1093/oso/9780198826491.003.0055
CEPAL. (2023). Datos e inteligencia artificial para el desarrollo en América Latina y el Caribe. Comisión Económica para América Latina y el Caribe.
CIPESA. (2024). The impact of artificial intelligence on data protection and privacy. Collaboration on International ICT Policy for East and Southern Africa. https://cipesa.org/wp-content/files/briefs/The_Impact_of_Artificial_Intelligence_on_Data_Protection_and_Privacy_-_Brief.pdf
Floridi, L., & Cowls, J. (2019). A unified framework of five principles for AI in society. Harvard Data Science Review, 1(1). https://doi.org/10.1162/99608f92.8cd550d1 DOI: https://doi.org/10.1162/99608f92.8cd550d1
Greenleaf, G. (2023). Global data privacy laws 2023: 162 national laws and 20 bills. Privacy Laws & Business International Report, 181, 1–5. DOI: https://doi.org/10.2139/ssrn.4426146
Mastrogiovanni, F. (2025). Data governance and artificial intelligence in smart cities: Ethical, legal and privacy challenges. Journal of Development Studies, 15(2), 115–132.
OECD. (2024). AI, data governance and privacy: Synergies and areas of international cooperation. Organisation for Economic Co-operation and Development. https://www.oecd.org/en/publications/ai-data-governance-and-privacy_2476b1a4-en.html
OECD. (2024). Recommendation of the Council on Artificial Intelligence. OECD Legal Instruments. https://legalinstruments.oecd.org/en/instruments/OECD-LEGAL-0449
Parlamento Europeo y Consejo de la Unión Europea. (2016). Reglamento (UE) 2016/679 relativo a la protección de las personas físicas en lo que respecta al tratamiento de datos personales y a la libre circulación de estos datos. Diario Oficial de la Unión Europea.
Parlamento Europeo y Consejo de la Unión Europea. (2024). Reglamento (UE) 2024/1689 por el que se establecen normas armonizadas en materia de inteligencia artificial. Diario Oficial de la Unión Europea. https://eur-lex.europa.eu/eli/reg/2024/1689/oj
Pineda, J. (2025). Inteligencia artificial y protección de datos personales en Ecuador: Retos jurídicos para la administración pública. Visionario Digital, 9(1), 45–61. https://cienciadigital.org/revistacienciadigital2/index.php/VisionarioDigital/article/view/3366
Red Iberoamericana de Protección de Datos. (2023). Recomendaciones generales para el tratamiento de datos personales en la inteligencia artificial. RIPD.
Russell, S., & Norvig, P. (2021). Artificial intelligence: A modern approach (4.ª ed.). Pearson.
SELA. (2025). Artificial intelligence and public policy in Latin America and the Caribbean. Sistema Económico Latinoamericano y del Caribe. https://www.sela.org/wp-content/uploads/2025/09/AI-and-public-policy-in-LAC-Book.pdf
UNESCO. (2021). Recomendación sobre la ética de la inteligencia artificial. Organización de las Naciones Unidas para la Educación, la Ciencia y la Cultura. https://unesdoc.unesco.org/ark:/48223/pf0000380455
Vatamanu, A. (2025). Artificial intelligence adoption in public administration: Opportunities, ethical challenges and governance implications. Administrative Sciences, 15(4), 149. https://doi.org/10.3390/admsci15040149 DOI: https://doi.org/10.3390/admsci15040149
Veale, M., & Borgesius, F. (2021). Demystifying the draft EU Artificial Intelligence Act. Computer Law Review International, 22(4), 97–112. https://doi.org/10.9785/cri-2021-220402 DOI: https://doi.org/10.9785/cri-2021-220402
Ye, H. (2024). Privacy risks of generative artificial intelligence: Challenges and regulatory perspectives. Data & Knowledge Engineering, 154, 102446. https://doi.org/10.1016/j.datak.2024.102446
Downloads
Published
How to Cite
Issue
Section
License
Copyright (c) 2026 Daniel Fernando Días Ledesma, Pablo Fausto Urbano Urbano , Sandra Sofía Santana Rodríguez , Edwin Alejandro Urbano Borja
This work is licensed under a Creative Commons Attribution-NonCommercial-ShareAlike 4.0 International License.
Eres libre de:
- Compartir : copiar y redistribuir el material en cualquier medio o formato
- Adaptar : remezclar, transformar y desarrollar el material
- El licenciante no puede revocar estas libertades siempre y cuando usted cumpla con los términos de la licencia.
En los siguientes términos:
- Atribución : Debe otorgar el crédito correspondiente , proporcionar un enlace a la licencia e indicar si se realizaron cambios . Puede hacerlo de cualquier manera razonable, pero no de ninguna manera que sugiera que el licenciante lo respalda a usted o a su uso.
- No comercial : no puede utilizar el material con fines comerciales .
- CompartirIgual — Si remezcla, transforma o construye sobre el material, debe distribuir sus contribuciones bajo la misma licencia que el original.
- Sin restricciones adicionales : no puede aplicar términos legales ni medidas tecnológicas que restrinjan legalmente a otros hacer algo que la licencia permite.
