{
  "node_id": "cu-framework",
  "title": "Cuba - Constitutional Privacy Rights and Ministry of Communications Data Governance Framework",
  "domain": "Cybersecurity",
  "version": "1.0.0",
  "last_updated": "2026-04-27",
  "bluf": "The Republic of Cuba is an independent socialist state in the Caribbean governed under the Constitution of Cuba (2019), which establishes fundamental rights including the inviolability of the home and correspondence, the right to personal privacy, and protections for personal communications and data. The Ministry of Communications (Ministerio de Comunicaciones - MINCOM) is the principal regulatory authority for telecommunications and digital services in Cuba. Empresa de Telecomunicaciones de Cuba (ETECSA) is the state-owned telecommunications monopoly. Cuba does not have a standalone comprehensive personal data protection law equivalent to the GDPR. The applicable framework for personal data governance consists of constitutional privacy rights, Decree-Law 370 of 2018 on the Informatization of Society (which regulates digital services and internet use), and related implementing regulations. Decree-Law 370 grants broad regulatory powers to MINCOM and has been subject to international criticism for restricting digital freedoms. Cuba's internet access is limited and subject to government control, and organisations operating digital services in Cuba must comply with MINCOM regulatory requirements, obtain applicable telecommunications licences, and respect constitutional privacy rights. Cuba is an observer state of the CARICOM regional framework but is not a full CARICOM member. Organisations processing personal data in Cuba must navigate significant regulatory complexity given Cuba's unique economic and political environment, including US embargo-related restrictions on technology exports and financial transactions.",
  "paywall": {
    "status": "LOCKED",
    "unlock_cost_usd": "0.01",
    "skyfire_id": "41779894-ece2-4163-9761-b3b1b76e19b0",
    "l402_paywall_url": "https://bidda.com/api/v1/vault/nodes/cu-framework.json"
  },
  "crosswalks": {
    "_available_keys": [
      "gdpr_equivalent",
      "iso_standard",
      "nist_framework",
      "regional_framework"
    ],
    "_note": "Full crosswalk values included in vault response"
  },
  "dependencies": [
    "iso-27001-2022",
    "iso-27701-privacy-information-management"
  ],
  "primary_citations_count": 7
}