Argentina PDPL (Law 25.326)

Argentina Personal Data Protection Law - registration, data subject rights, cross-border transfers.


Short name	AR PDPL
Region	Americas
Country or scope	Argentina
Sector	Privacy
In your workspace	On unless you switch it off in Compliance › Manage.

How Safeguard covers AR PDPL

Scan requirements: 6, all decided by a scan.
Controls: the scan requirements below, plus 10 controls from Safeguard's control catalog for AR PDPL.
Automated tests: none map to it directly. You can link any automated test to its controls yourself (how).
Policy templates: 23: 1 written for AR PDPL and 22 from the standard set.

How each kind of coverage works, and what the readiness score counts: Compliance frameworks.

What a scan checks

Each scan of a product checks these 6 requirements against what the scan found, including the product's software inventory (SBOM).

Requirement	What Safeguard checks	Decided by
`AR-PDPL-9` Data Security	Controllers must adopt technical and organizational measures guaranteeing the security and integrity of personal data, and may not record data in databases that do not meet technical integrity and security conditions; integrity hashes across the software inventory evidence this (Law 25.326 Art. 9)	Scan
`AR-PDPL-4` Data Quality	Data must be accurate, adequate and up to date for its purpose; the same quality discipline applied to the processing environment requires every component to carry a complete name and version (Law 25.326 Art. 4)	Scan
`AR-PDPL-21` Database Registration	Data files and databases must be registered with the supervisory registry, including identification of the file and its characteristics; a uniquely identified, timestamped SBOM supports this registration duty (Law 25.326 Art. 21)	Scan
`AR-PDPL-25` Third-Party Processing Services	When processing is outsourced to a service provider, duties and responsibilities must be contractually fixed, which presupposes knowing which suppliers stand behind the software used in processing (Law 25.326 Art. 25)	Scan
`AR-PDPL-12` International Transfer Readiness	Transfers to countries without adequate protection are restricted; determining what data flows where requires that the components performing processing be precisely identifiable (Law 25.326 Art. 12)	Scan
`AR-PDPL-10` Duty of Confidentiality	Persons involved in processing are bound by professional secrecy; accountability for who built and handles the processing tooling requires recorded creator provenance (Law 25.326 Art. 10)	Scan

More controls in the catalog

The framework's Controls tab lists its scan requirements and these controls from Safeguard's control catalog. Evidence them with automated tests, uploaded evidence, policies or an attestation.

Control	Name
`PDPL-Art4`	Calidad de los Datos (Art. 4)
`PDPL-Art5`	Consentimiento (Art. 5)
`PDPL-Art9`	Seguridad de los Datos (Art. 9)
`PDPL-Art11`	Transferencia Internacional (Art. 11)
`PDPL-Art13`	Derecho de Acceso (Art. 13)
`PDPL-Art14`	Derecho de Rectificación (Art. 14)
`PDPL-Art21`	Registro de Bases de Datos (Art. 21)
`PDPL-DS-01`	Datos Sensibles: Prohibición y Excepciones
`PDPL-EN-01`	Confidencialidad del Responsable
`PDPL-CE-01`	Cesión de Datos entre Responsables

Policy templates

Written for AR PDPL:

Política de Transferencia Internacional de Datos Personales: LATAM

And 22 from the standard set, adapted to AR PDPL.