Argentina: Submitted Personal Data Protection Bill including cybersecurity measures to Congress

On 29 June 2023, the Argentinian data protection agency (AAIP) submitted its definitive draft for a Personal Data Protection Bill, amending the current Personal Data Protection Act No. 25,326, to the Argentinian Congress. The draft Bill is the result of a process of participatory drafting of standards. The Bill would require entities processing personal data to conduct risk assessments and implement preventive, detective, and responsive security measures to protect the personal data they store. The Bill specifies that entities operating within the country will have to appoint a legal representative. Furthermore, the entities storing and processing personal data will have to notify the authorities of data breaches within 72 hours of their detection.