Bolivia

BO · BOL · Americas

4 regulators · 8 laws & regulations · 8 obligations

Obligation	Timing	Regulator	Arises from	Source
All industries
Private entities to supply information to the UIF and report suspected corruption	—	UIF	Ley N° 004 de Lucha contra la Corrupción, Enriquecimiento Ilícito e Investigación de Fortunas «Marcelo Quiroga Santa Cruz» (Law 004 on the fight against corruption, illicit enrichment and investigation of fortunes)	source
Art. 21 of Law 004 requires the private sectors it lists (including NGOs and foundations, political parties, real estate, customs brokers, casinos and gambling, hotels and travel agencies, investment services) to provide information the UIF requests in an investigation and to report suspected corruption they detect. No deadline is stated in the article.
Providers of public services to accept digitally signed documents and digital-citizenship acts	—	AGETIC	—	source
Art. 8.2 of Law 1080 requires all public and private institutions providing public services to accept or process documents generated through digital citizenship or digitally signed. Non-compliance is subject to liability for the exercise of public functions, and for private institutions the supervising body must set compliance mechanisms.
Banking
AML compliance programme and responsible officer	Ongoing; manual reviewed at least once a year	UIF	Decreto Supremo N° 4904, Reglamento de la Unidad de Investigaciones Financieras - UIF (Decree 4904, Regulation of the Financial Investigations Unit)	source
DS 4904 Art. 25(a) requires a responsible officer (funcionario responsable) appointed with board approval to liaise with the UIF, Art. 25(j) internal control policies and Art. 25(m) an internal prevention manual. The EIF instruction adds that the appointment of the officer and a substitute must be reported to the UIF within five business days (Art. 12 I), and that the officer reviews the manual at least once a year (Art. 13 f).
AML record retention	Retention period Not less than 10 years after the transaction	UIF	Decreto Supremo N° 4904, Reglamento de la Unidad de Investigaciones Financieras - UIF (Decree 4904, Regulation of the Financial Investigations Unit)	source
Art. 18(I) requires records to be kept for a period not less than ten years after the transaction, and Art. 18(II) allows physical, electronic or digital storage.
Customer due diligence (KYC/CDD)	At onboarding + ongoing	UIF	Decreto Supremo N° 4904, Reglamento de la Unidad de Investigaciones Financieras - UIF (Decree 4904, Regulation of the Financial Investigations Unit)	source
Art. 16 requires risk-based due diligence on customers, users and beneficial owners, including identification, verification and ongoing monitoring; Art. 17(II)(a) sets a 20% ownership threshold for beneficial owners. The EIF instruction adds data updates every three years under simplified and every two years under enhanced due diligence (Art. 47).
Digital signature and ATT-authorised certificates for documents in the national payment system	Ongoing; retention of at least 10 years for certificate data and signed documents	BCB	—	official
Art. 4 of the Digital Signature Regulation requires documents exchanged in the payment systems it covers to be digitally signed, with validation through certificates from a certification entity authorised by the ATT; Art. 18 requires certificate data and signed documents to be kept for at least 10 years.
Registration with the UIF renewed every two years	Frequency Every two years	UIF	Instructivo Específico para Entidades de Intermediación Financiera con Enfoque Basado en Gestión de Riesgos contra la Legitimación de Ganancias Ilícitas, el Financiamiento del Terrorismo y el Financiamiento de la Proliferación de Armas de Destrucción Masiva (Specific Instruction for Financial Intermediation Entities, risk-based, against money laundering, terrorist financing and proliferation financing)	official
Art. 4 I b) of the EIF instruction requires the entity to renew its registration with the UIF every two years, counted from the registration or the last renewal.
Telecom & Tech
Telecom operators to protect secrecy of communications and personal data	—	—	—	source
Art. 56 of Law 164 requires operators and providers to guarantee the secrecy of communications and to protect personal data and privacy; Art. 59(13) requires them to protect personal data and prevent its unauthorised disclosure. No breach-notification duty was seen. This is a sector rule, not a general data protection regime.
No obligations match these filters.