Today, December 13, 2024, Law No. 21,719, which amends Law No. 19,628 on the Protection of Private Life, has been published in the Official Gazette. This new legislation regulates the protection and processing of personal data and creates the Data Protection Agency.
From this date, there is a six-month deadline for the issuance of the corresponding regulations, 20 months for the Civil Registry and Identification Service to delete the databases specified in Article 22 of Law No. 19,628, and for the designation of the councilors of the new Agency's Governing Board. The new law will enter into force in 24 months.
Among the most notable changes are the creation of the Data Protection Agency, the assignment of greater responsibilities to data controllers, the strengthening of data subjects' ARCO rights, and the implementation of significant and effective penalties, which can reach up to 20,000 UTM (US$1.4 million approx.).
For more information on the Data Protection Law, visit our website here.
