The Personal Data Regulatory and Control Unit of Uruguay (“URCDP”) issued Resolution No. 70/2023, which complements the recent Resolution No. 63/2023 dated November 22, 2023 in which International transfers of personal data made to organizations included in the “Data Privacy Framework List” published by the Department of Commerce of the United States of America and to entities subject to the Information Protection Law were included as appropriate. Staff from the Republic of Korea We attach a link to our previous alert.
Within this framework, the new Resolution No. 70/2023 establishes new obligations for those entities that wish to transfer personal data to organizations that are covered by the aforementioned Privacy Framework.
- Implications of Resolution No. 70/2023:
Database Registry – International Data Transfers:
Before carrying out international transfers of personal data, it is necessary to register/update the corresponding database in the URCDP Database Registry (indicating the countries to which personal data transfers are made).
Information to Data Owners:
Those responsible and in charge of processing must inform the data owners of the destination of their data, the role of the importer, the transfer period, the basis of legitimacy and the processing operations carried out by the importer , in compliance with the article. 13 of Law No. 18,331.
Adaptation of Privacy Policies: Read more
