The framework
Cuba regulates personal data through Law 149 of 2022 on Personal Data Protection, supervised by state bodies.
For advertisers the consent posture matters most, and Cuba sits in the opt-in bloc, where tracking and outreach need permission up front.
Key instruments
Law 149 of 2022 on Personal Data Protection
Cuba adopted a personal data law in 2022; it grants formal rights while preserving expansive state access, and there is no independent regulator.
Marketing and advertising
Consent-oriented rules within a state-controlled information system. Most channel decisions here follow from that consent rule.
Cross-border transfers
The state controls cross-border data flows directly. Foreign laws with extraterritorial reach, the GDPR above all, can still govern data about residents here whenever a controller abroad is involved.
Enforcement and penalties
Enforcement runs through administrative measures. A ceiling means little until the authority uses it, so its docket is the better guide.