Status
In force
Consent model
Opt-in
Primary law
Law No. 171/2018 on Personal Data Protection
Year
2018
Authority
Data Protection Authority of San Marino
Marketing consent
GDPR-modeled framework.
Transfers
Transfer rules follow the GDPR model of adequacy, appropriate safeguards and narrow derogations.
Penalties
Administrative fines follow the GDPR model.
The framework
San Marino's framework rests on Law No. 171/2018 on Personal Data Protection, with the Data Protection Authority of San Marino as the supervisory authority.
That puts San Marino in the global opt-in majority, where permission comes before processing and marketing waits for consent.
Key instruments
Law No. 171/2018 on Personal Data Protection
2018 · In force
San Marino adopted a GDPR-equivalent statute in 2018; compliance built for the EU generally satisfies it.
Marketing and advertising
GDPR-modeled framework. In practice that means consent before tracking or marketing outreach, documented well enough to show a regulator.
Cross-border transfers
Transfer rules follow the GDPR model of adequacy, appropriate safeguards and narrow derogations.
Enforcement and penalties
Administrative fines follow the GDPR model. Read the ceiling together with the authority's track record, which prices the risk.
Cite this page: "San Marino Data Privacy Laws." Digital Privacy Regulations, September 28, 2026, https://digitalprivacyregs.com/san-marino.html. Accessed [date].