On 31 May 2002, the registration of personal data databases requirement in Law 25.326 on Personal Data Protection was implemented 180 after the entry into force of the Regulatory Decree 1558 / 2001. The Law applies to data controllers established within the jurisdiction and have a taxation identification number. Under the Law, the entities are required to register with the National Registry of Personal Databases and provide information regarding the person in charge, characteristics and purpose of the database, type of data, form of collection, entities to whom such data may be transmitted, security measures adopted, storage term and form and conditions for data subjects to exercise their rights. The entities are prohibited from storing data other than the type specified in the register.
Original source