Argentine PDPA

Overview

Argentina's PDPA is one of the earliest comprehensive data protection laws in Latin America, earning EU adequacy status in 2003, one of few non-European countries to achieve this. The law is increasingly outdated, and multiple reform bills submitted in 2025 would introduce GDPR-aligned penalties.

What This Means for Your Website

• Prior, free, express, and informed consent is required for processing personal data of Argentine visitors
• Databases must be registered with the AAIP
• EU adequacy enables smooth data transfers between Argentina and the EU
• Current penalties are low but reform would bring GDPR-level fines (4% of turnover)
• Sensitive data processing is prohibited except with specific legal grounds

Key Requirements

The AAIP enforces the PDPA with a three-tier sanction system. Current penalties of ARS 1,000-100,000 are low by international standards. The pending reform would increase these to up to 4% of annual turnover or ARS 10 billion. Consumer requests must be fulfilled per the law's requirements. Cross-border transfers follow an adequacy-based model.

How ConsentStack Handles This

ConsentStack applies opt-in consent for Argentine visitors with express consent for all personal data collection, positioning websites for compliance with both current law and the pending GDPR-aligned reform.