Makes justice decisions, in Uruguay

Ley N° 18.331, art. 16, según Ley N° 18.719, de 2010 (automated individual decisions) · Read the law's page

• Let a data subject challenge, and obtain the valuation criteria and the program behind, any administrative act or private decision based solely on automated processing of their personal data that offers an assessment of their character or personality.

Draft prepared by AGESIC; under parliamentary consideration as of late 2025-2026

Ley N° 18.331, arts. 13-15 y 21, según Ley N° 20.075, de 2022, y Ley N° 18.719, de 2010 (derechos de los titulares de los datos) · Read the law's page

• Before or when you collect personal data, tell the data subject expressly, precisely, and unambiguously the purpose of the processing and who may receive it, the existence and identity of the database's controller, whether answering is mandatory, the consequences of refusing or of inaccuracy, their rights of access, rectification, and challenge, whether the data will be transferred internationally, and, for an automated-decision process, the valuation criteria, the process applied, and the technology or program used.
• Give a data subject free access, at most every six months, to all information about them held in your database, supplied within five business days, in clear language, covering the whole record without revealing a third party's data.
• Correct, update, include, or delete a data subject's personal data within five business days of their request when it is erroneous, false, or missing, or explain why it does not, and notify any recipient of the data of the correction within five business days.
• On request, remove or block a data subject's data from a marketing, canvassing, or profiling database at any time, and give the data subject access to the data you hold in such a database free of charge.