Uruguay Personal Data Protection Law
View Law TextMaximum Fine
500,000 UI
Scope
National
Regulator
URCDP
Status
Active
Need Help with Uruguay Personal Data Protection Law Compliance?
Get expert guidance on implementing Uruguay's data protection requirements and ensuring ongoing compliance for your organization.
Get Expert HelpOverview
Uruguay's Personal Data Protection Law establishes comprehensive requirements for the protection of personal data and individual privacy rights.
Key Facts
- Comprehensive data protection law
- Enforced by URCDP
- Database registration required
- International transfer restrictions
- Strong individual rights
Key Principles
Data Quality
Requirements for ensuring data accuracy and quality.
Requirements
- Data must be accurate and up-to-date
- Data collection must be adequate and relevant
- Purpose limitation principles apply
- Regular data verification required
- Data correction procedures
Examples
- Data verification processes
- Update procedures
- Quality checks
- Correction mechanisms
Consent Requirements
Standards for obtaining valid consent.
Requirements
- Express consent required
- Clear information about processing
- Right to withdraw consent
- Specific consent for sensitive data
- Documentation of consent
Examples
- Consent forms
- Privacy notices
- Withdrawal mechanisms
- Consent records
Security Measures
Required security measures for data protection.
Requirements
- Technical safeguards
- Administrative measures
- Access controls
- Security policies
- Incident response
Examples
- Security protocols
- Access policies
- Incident plans
- Training programs
Compliance Requirements
Database Registration
Requirements for registering databases with authorities.
Implementation Steps
- Identify registrable databases
- Complete registration forms
- Submit required documentation
- Maintain registration
- Update when needed
Required Documentation
- Registration forms
- Database inventory
- Processing records
- Update procedures
- Maintenance logs
International Transfers
Requirements for international data transfers.
Implementation Steps
- Assess transfer basis
- Implement safeguards
- Obtain authorizations
- Document transfers
- Monitor compliance
Required Documentation
- Transfer agreements
- Authorization records
- Safeguard documentation
- Compliance reports
- Monitoring logs
Rights Management
Procedures for handling data subject rights.
Implementation Steps
- Establish request procedures
- Implement response systems
- Train staff
- Document responses
- Monitor compliance
Required Documentation
- Rights procedures
- Response templates
- Training materials
- Request logs
- Compliance records
Enforcement & Penalties
Regulatory Authority Enforcement
Enforcement by the Uruguayan Data Protection Authority (URCDP).
Penalty Categories
Administrative Fines
Up to 500,000 UI
For serious violations
Corrective Measures
Varies
Including warnings and compliance orders
Example Cases
Database Registration Case
100,000 UI
2023 - Failure to register databases
Consent Violation
200,000 UI
2023 - Processing without valid consent