Uruguay: URCDP publishes guide on personal data protection
The Uruguayan data protection authority ('URCDP') published, on 23 February 2022, a guide on personal data protection in Uruguay. In particular, the URCDP stated that the guide is intended both for citizens and public and private organisations that are responsible for guaranteeing the right to privacy and data protection and that it details the operation and powers of the URCDP, as well as the principles and rights.
As such, the guide:
- elaborates on the scope of Law No. 18.331 on the Protection of Personal Data and the Habeas Data Action 2008;
- highlights the principles of data protection such as legality, accuracy, purpose, and data security;
- discusses the rights of data subjects such as the rights to access, information, rectification, suppression, inclusion, and deletion among others; and
- discusses the processing of sensitive personal data.