On 2 November 2000, Law 25.326 on Personal Data Protection, including cross-border data transfer regulation, entered into force. The Law prohibits the transfer of personal data to jurisdictions that do not provide an adequate level of protection. The prohibition does not apply in cases of international judicial cooperation, exchange of medical information, stock exchange or banking transfers, transfers within the framework of international treaties or between intelligence agencies in the fight against organised crime, terrorism and drug trafficking.
Original source