Key Facts
Overview
Argentina's PDPA is one of the earliest comprehensive data protection laws in Latin America, earning EU adequacy status in 2003 — one of few non-European countries to achieve this. The law is increasingly outdated, and multiple reform bills submitted in 2025 would introduce GDPR-aligned penalties.
What This Means for Your Website
- Prior, free, express, and informed consent is required for processing personal data of Argentine visitors
- Databases must be registered with the AAIP
- EU adequacy enables smooth data transfers between Argentina and the EU
- Current penalties are low but reform would bring GDPR-level fines (4% of turnover)
- Sensitive data processing is prohibited except with specific legal grounds
Key Requirements
The AAIP enforces the PDPA with a three-tier sanction system. Current penalties of ARS 1,000-100,000 are low by international standards. The pending reform would increase these to up to 4% of annual turnover or ARS 10 billion. Consumer requests must be fulfilled per the law's requirements. Cross-border transfers follow an adequacy-based model.
How ConsentStack Handles This
ConsentStack applies opt-in consent for Argentine visitors with express consent for all personal data collection, positioning websites for compliance with both current law and the pending GDPR-aligned reform.
Penalties
ARS 1,000-100,000 under current law. Reform pending with fines up to 4% of annual turnover or ARS 10 billion.
Key Requirements
- Prior, free, express, and informed consent for data collection
- Register databases with the AAIP
- Purpose limitation and data quality obligations
- Security measures for stored data
- Data subject rights: access, rectification, deletion, suppression
- Cross-border transfer restrictions
Notable Provisions
- EU adequacy status since June 2003
- Three reform bills in 2025 addressing AI and modernization
- Current penalties are low — reform would bring GDPR-level enforcement
- One of earliest DP laws in Latin America
Other Latin America & Caribbean Regulations
Frequently Asked Questions
Does Argentina have EU adequacy?
Yes. Argentina has held EU adequacy status since June 30, 2003 — one of few non-European countries with this designation.
Is Argentina's data protection law being reformed?
Yes. Three reform bills were submitted in 2025 addressing AI, modernization, and GDPR alignment. The reforms would introduce penalties up to 4% of turnover.
What are the current Argentine penalties?
ARS 1,000-100,000 under the current law — relatively low. Reform would increase to up to 4% of annual turnover or ARS 10 billion.
Stay compliant with Argentine PDPA
ConsentStack helps you implement Opt-in consent for Argentina automatically.