Law 25.326
Personal Data Protection Law No. 25.326 (Ley de Proteccion de los Datos Personales)
Law 25.326 is Argentina's personal data protection law, enacted in 2000 and regulated by Decree 1558/2001. It was the basis for the European Commission's 2003 adequacy decision for Argentina, and Argentina has since ratified the modernized Council of Europe Convention 108+ (Law 27.699).
Who it applies to
Public and private databases and processors handling personal data in Argentina, including databases intended to provide reports.
Identity requirements
- Obtain free, express and informed consent unless an exception applies
- Do not compel anyone to provide sensitive data, and process it only for reasons of general interest authorized by law or for statistical or scientific purposes where data subjects cannot be identified
- Adopt technical and organizational measures to guarantee the security and confidentiality of personal data
- Transfer personal data only to countries or organizations that provide adequate protection, subject to exceptions
- Register databases with the AAIP's national registry
How it impacts identity systems
| Identity area | Impact |
|---|---|
| Customer identity & consent (CIAM) | Express consent is the default basis for processing customer identity data. |
| Data residency & cross-border transfer | International transfers need an adequate destination or a recognized exception such as model contracts. |
| Audit, logging & accountability | Database registration and documented security measures are core obligations. |
Penalties
Article 31 provides for warnings, suspension, fines, closure or cancellation of the database; AAIP Resolution 126/2024 sets the current criteria for grading sanctions. Criminal offences for unlawful access to databases are also in the Penal Code.
Status and dates last verified against primary sources on 2026-10-31.
Law 25.326: frequently asked questions
- Does Argentina have EU adequacy?
- Yes. The European Commission recognized Argentina as providing adequate protection in 2003, on the basis of Law 25.326.
- Is a new Argentine data protection law in force?
- Reform bills to replace Law 25.326 have been introduced several times, but as of October 2026 Law 25.326 remains the governing law.