Puerto Rico lacks comprehensive data protection laws. Current focus is on consumer protection and breach notification. Several initiatives are under consideration to enhance privacy rights.