Ecuador

Summary

Ecuador presents medium risk for crawling. The Código Orgánico Integral Penal (COIP) art. 234 criminalises acceso no consentido to computer, telematic, or telecommunications systems with penalties of 3–5 years; the offence requires the actor to "illegitimately exploit" the access achieved (modify portals, redirect traffic, etc.), giving a somewhat higher bar than simple public-page access but leaving uncertainty for large-scale scraping. Data protection is governed by the Ley Orgánica de Protección de Datos Personales (LOPDP, 2021). The LOPDP's two-year compliance period elapsed May 2023 (administrative sanctions fully in force since May 26 2023). The independent supervisory authority — the Superintendencia de Protección de Datos Personales (SPDP) — began operations in October 2024 and is ramping enforcement; as of late 2024 no major sanctions had yet been issued, but regulatory activity is increasing. Copyright is governed by the Código Orgánico de la Economía Social del Conocimiento (Código INGENIOS, 2016), which uses a closed list of exceptions with no TDM carve-out and no sui generis database right. No scraping-specific case law exists.