World Watch/Argentina/Data & Privacy

Data & Privacy · Argentina

Data protection & privacy laws in Argentina (2026)

Comprehensive lawPersonal Data Protection Act No. 25.326 (Ley de Protección de los Datos Personales, 2000) and its regulatory decree, enforced by the Agency for Access to Public Information (AAIP) through its National Directorate for Personal Data Protection (DNPDP).Country index 73 · B

Argentina shaded by its data & privacy status

Argentina has a comprehensive, generally-applicable data-protection regime grounded in Law 25.326 (enacted 2000) and reinforced by constitutional habeas data, supervised by an independent authority, the AAIP. It was the first Latin American country granted EU adequacy and remains confirmed as 'adequate' (most recently in the Commission's January 2024 review). Several bills to modernize the law along GDPR lines are pending in Congress as of 2026 but have not yet been enacted.

Key points

Comprehensive law in force

Law 25.326 provides integral protection of personal data held in public or private files/databases, guaranteeing rights to honor, privacy, and access to one's own data; it is the country's overarching, cross-sector regime.

Supervisory authority

The Agency for Access to Public Information (AAIP), an autonomous body with functional independence, is the enforcement authority; its National Directorate for Personal Data Protection (DNPDP) handles registration, supervision, and sanctions.

Core obligations and data-subject rights

Controllers must obtain consent, observe purpose limitation and data quality/security, and respect rights of access, rectification, deletion and updating; sensitive data receives heightened protection. Registration of databases in the National Registry is required.

Sanctions regime

The DNPDP classifies infractions as mild, serious, or very serious; sanctions range from warnings and database suspension/closure to fines, with classification and graduation updated by AAIP Resolution 240/2022.

EU adequacy status

Argentina was the first Latin American country deemed 'adequate' by the European Commission; the Commission's first review (published 15 January 2024) confirmed continued adequacy, citing its accession to Convention 108/108+ and its independent supervisory authority, while recommending legislative codification of protections currently set at sub-legislative level.

Pending GDPR-style reform

Multiple bills to overhaul Law 25.326 (e.g., Carro 1948-D-2025, Doñate 644-S-2025, Yeza 1625-D-2026) are under debate in Congress, introducing accountability, privacy by design/default, data portability and rights against automated decisions; none had been enacted as of early 2026.

Timeline - major decisions & events

Dec 1, 2025lawofficial
AAIP relaunches modernization of Personal Data Protection Law

The data protection authority reopened a multisectoral dialogue process to update Law 25.326, reviewing critical points of its earlier draft amid three competing reform bills in Congress. Aims to align Argentina with GDPR/Convention 108+ as the EU has urged legislative modernization.

AAIP (Argentina.gob.ar)
Aug 4, 2025guidanceofficial
AAIP creates Program to Strengthen Data Protection in Public Administration

Resolution 145/2025 launched a three-year program requiring federal agencies to adopt PDPL-aligned privacy policies, appoint and train data protection officers, and register all government databases. Signals a shift toward more proactive enforcement in the public sector.

Boletín Oficial
Aug 1, 2025law
AI-specific data protection bill (4243-D-2025) introduced

A bill in the Chamber of Deputies proposed AI-focused data rules including a National AI Registry, mandatory risk assessments for medium/high-risk systems, and audit powers. Reflects growing legislative attention to automated decision-making.

IAPP
Apr 29, 2025lawofficial
Comprehensive reform bills to replace Law 25.326 presented in Congress

Deputy Pablo Carro filed bill 1948-D-2025 (paralleled by Senator Doñate's S-644/2025) to overhaul the 25-year-old data protection law, adding accountability, privacy by design/default, data portability, breach notification (72h) and rights against automated decisions, modeled on GDPR.

Cámara de Diputados (HCDN)
Sep 17, 2024guidanceofficial
AAIP publishes guide on transparency and data protection for responsible AI

The authority released a preliminary guide for public and private entities covering impact assessments, protection by design, explainability, bias testing and accountability across the AI lifecycle. Open for public comment until October 30, 2024.

AAIP (Argentina.gob.ar)
May 24, 2024decisionofficial
AAIP enacts new sanctions regime for data protection breaches

Resolution 126/2024 approved a reformed classification of infringements and graduated penalties under Law 25.326 and the 'No Llame' Law 26.951, effective June 1, 2024, unifying and modernizing the enforcement framework with a 50% discount for voluntary fine payment.

Boletín Oficial

Argentina - other topics

Last verified 5/23/2026 · Orientation, not legal advice - verify against the primary sources linked above. Explore the full world map →