On 2 November 2000, Law 25.326 on Personal Data Protection, including the registration of personal databases requirement, entered into force. The Law applies to entities that process personal data established within the jurisdiction and have a taxation identification number. Under the Law, the entities are required to register with the National Registry of Personal Databases and provide information regarding the person in charge, characteristics and purpose of the database, type of data, form of collection, entities to whom such data may be transmitted, security measures adopted, storage term and form and conditions for data subjects to exercise their rights. The entities are prohibited from storing data other than the type specified in the register.
Original source