Regulations › Rest of world › Argentina
LPDP
Personal Data Protection Law No. 25,326
WhenIn effect since 2 November 2000
Who enforces itAgencia de Acceso a la Información Pública (AAIP)
Who it applies toPublic and private files, registers and databases holding personal data in Argentina.
Tell the regulatorNo statutory breach notification duty
DPO requiredNot addressed
RegistrationPublic databases and private databases that go beyond exclusively personal use must register w…
Transfers abroadTransfers prohibited to countries or bodies without adequate protection, except listed cases s…
Request deadlineAccess within 10 calendar days
Maximum fineARS 1,000 to 100,000 per infringement
Every requirement we score, with the rule in plain words and the section it comes from. Darker means more demanding. See every law side by side →
Reach and lawful basis
Reach abroad
0
No extraterritorial provision; applies to files and databases, public or private, in Argentina.Art. 1 · source ↗
Lawful basis
3
Processing is unlawful without consent, except listed cases such as public sources, state functions, basic listings, contracts and certain financial operations. No legitimate interests.Art. 5 · source ↗
Consent
3
Consent must be free, express and informed, given in writing or by an equivalent means.Art. 5(1) · source ↗
Sensitive data
2
No one can be compelled to provide sensitive data; processing only for general interest authorized by law, or dissociated statistics or science.Arts. 2, 7 · source ↗
Children
0
No child-specific rule or age threshold in the Act; general capacity rules of the Civil and Commercial Code apply.Not addressed · source ↗
People's rights
Rights
2
Access, rectification, updating and suppression; removal or blocking of marketing data at any time.Arts. 14, 16, 27 · source ↗
Art. 20 limits automated assessment only for judicial and administrative decisions. No portability.
Request deadline
3
Access within 10 calendar days; rectification, updating or suppression within 5 business days.Arts. 14(2), 16(2) · source ↗
Marketing
1
Marketing may use data from public sources or provided by the holder; holders may demand removal or blocking at any time (opt-out).Art. 27 · source ↗
National Do Not Call Registry (Law 26,951) also applies.
Governance
Registration
2
Public databases and private databases that go beyond exclusively personal use must register with the AAIP registry.Arts. 21, 24 · source ↗
DPIA
0
No DPIA requirement in the Act.Not addressed · source ↗
AAIP has issued guidance on impact assessments (not reviewed).
Records
1
No separate records duty; the database registration filing describes each database.Art. 21 · source ↗
Retention
1
Data must be destroyed once no longer necessary or relevant to the purpose collected.Art. 4 · source ↗
Breaches
Tell the regulator
0
No statutory breach notification duty.Not addressed · source ↗
AAIP Res. 47/2018 recommends security measures (not reviewed). A replacement bill would add notification; not enacted.
Transfers
Transfers abroad
2
Transfers prohibited to countries or bodies without adequate protection, except listed cases such as treaties, judicial cooperation and other statutory exceptions.Art. 12 · source ↗
Decree 1558/2001 and AAIP rules add consent, adequacy lists and model clauses (not reviewed).
Enforcement
Maximum fine
1
ARS 1,000 to 100,000 per infringement; total for the same conduct capped at ARS 50 million (about USD 35,000-40,000).Art. 31; AAIP Res. 126/2024 Annex II · secondary source · source ↗
AAIP Res. 126/2024 (effective 1 Jun 2024) replaced Disp. 7/2005; 50% discount for voluntary payment within 20 business days.
Criminal liability
2
Penal Code offenses added for knowingly inserting false data and unlawfully accessing or disclosing data, punishable by imprisonment.Art. 32 (Penal Code arts. 117 bis, 157 bis) · source ↗
Prison terms are in the Penal Code; not read in the source.
Private action
2
Habeas data court action to access, rectify, suppress or keep data confidential; liability for damages also arises.Arts. 31(1), 33-43 · source ↗
Scores are our reading on the published rubric, checked 18 October 2026. Not legal advice.
Regulations library
Every US state privacy law, on one map
24 states have a comprehensive privacy law in the library, alongside the EU, UK, US federal and global laws: 102 in all, each explained in plain words with its sources. Select a state to see what applies there.
- In force
- Coming into force
- Sector laws