Regulations › Rest of world › Uruguay
LPDP
Law 18,331 on Personal Data Protection and Habeas Data Action
WhenIn effect since 18 August 2008
Who enforces itUnidad Reguladora y de Control de Datos Personales (URCDP)
Who it applies toPublic and private processing of personal data in Uruguay, and foreign controllers targeting or monitoring people there.
Tell the regulatorNotify the URCDP within 72 hours of becoming aware of a breach, then file a detailed report on…
DPO requiredDPO required for public bodies, majority state-owned entities, private entities whose core bus…
RegistrationAll public and private databases, other than purely personal ones, must be registered with the…
Transfers abroadTransfers prohibited to countries without adequate protection, except listed cases (explicit c…
Request deadlineAccess and rectification or suppression requests within 5 business days
Maximum fineUp to 500,000 indexed units (UI) (roughly USD 80,000), plus warning or suspension of the datab…
Recent developments
Nothing reported yet. Regulatory Watch lists new rules, enforcement and court decisions as they arrive.
Regulations library
Every US state privacy law, on one map
24 states have a comprehensive privacy law in the library, alongside the EU, UK, US federal and global laws: 102 in all, each explained in plain words with its sources. Select a state to see what applies there.
- In force
- Coming into force
- Sector laws