Argentina
ComprehensivePersonal Data Protection Law No. 25,326
Authority: Agencia de Acceso a la Información Pública (AAIP) | Enforcement: Active | Enacted: November 2000
Overview
Argentina was the first Latin American country with comprehensive data protection (2000). It has EU adequacy status. The law is being updated to align with modern standards. The AAIP actively enforces the law.
14-Topic Coverage
Data Protection Authority
Fully AddressedAAIP oversees personal data protection and access to public information.
Consent Requirements
Fully AddressedFree, express, and informed consent required. Written consent for sensitive data.
Data Subject Rights
Fully AddressedRights to access, rectification, suppression, and confidentiality (habeas data).
Cross-Border Transfer
Fully AddressedTransfers to adequate countries or with consent. Argentina has EU adequacy.
Breach Notification
Partially AddressedNo mandatory breach notification in current law. Draft reform addresses this.
DPO Requirements
Partially AddressedGovernment databases must register. Private sector encouraged.
Children's Data
Partially AddressedGeneral provisions apply. Specific protections for minors' data.
Penalties & Enforcement
Fully AddressedAdministrative sanctions including fines. Criminal penalties for certain violations.
Sector-Specific Rules
Fully AddressedBCRA financial rules, health data regulations, telecom data provisions.
Cookie/Tracking
Not AddressedNo specific cookie regulation.
AI & Automated Decisions
Not AddressedNo specific provisions on automated decisions in current law.
Data Localisation
Not AddressedNo general data localisation requirement.
Significant Data Fiduciary
Not AddressedNo equivalent concept.
Government Data
Fully AddressedLaw applies to both public and private sector databases.
Coverage Summary
Quick Navigation
Need Compliance Help?
Our data privacy team can help you navigate Argentina's regulations.
Book a Consultation