Data protection & privacy

There are no specific laws on the protection of databases or data in general in Aruba.

However, companies and organizations are under an obligation to protect information that can be linked to an individual (personal data) pursuant to the National Ordinance on Personal Data (in Dutch: Landsverordening Persoonsregistratie). Any such personal information may only be collected, used and disclosed in relation to purposes which are in agreement with the purpose of the concerned collection of personal data. Also, the purpose of collection of certain personal data may not be contrary to the law, public order or good morals. The personal information validly obtained may only be disclosed to a third party (i) when this follows from the purpose of the personal data collection, (ii) by virtue of the law or (iii) with the consent in writing of the person concerned.