Argentina: Amended Personal Data Protection Bill outlining data subject rights and sensitive data handling obligations

On 24 February 2023, the Argentinian data protection agency (AAIP) amended its proposal for a Personal Data Protection Bill amending the current Personal Data Protection Act No. 25,326, which it presented to the Argentinian Congress. The Bill includes a series of proposals derived from the previous public consultation. The proposal introduces definitions for personal data and lists the categories of data that would be classified as sensitive data, including genetic, biometric and financial data. The Bill outlines obligations concerning the treatment of minors' data, including requisites for informed consent, which is, in some cases, extended to minors above thirteen years of age. Furthermore, the Bill outlines user rights, including the right to access, rectify and delete their data and withdraw consent for data collection and processing. Finally, the Bill would introduce data minimisation and data protection by design requirements.