Cross-border transfer of personal information is authorised when: 1.information transferred is public, or 2. Data subjects give prior consent and express authorization of each client, subscriber or user. Ecuador does not currently have a data protection law. The bill is currently under discussion. However, Electronic Commerce Law, Electronic Signatures and Data Messages has general provisions for the protection of personal data.