Decreto 1558/2001, regulation of Ley 25.326: how the rights of access, rectification, updating, erasure and confidentiality are exercised
Decreto 1558/2001 arts. 14-16 (reglamentación de la Ley 25.326: derecho de acceso y derechos de rectificación, actualización, supresión y confidencialidad)
In force.
A data subject rights rule binding public and private bodies.
- Instrument type
- a regulation made under an act
- Obligation class
- Data subject rights
- Audit expectation
- none
What it requires
- Accept an access request in any form that identifies the data subject, made in person or by written notice that leaves proof of receipt; do not require a specific formula.
- Answer every access request, whether or not you hold data on the person, by the means the data subject chose or stated.
- On an access request, tell the data subject whether they are in your database, all the data you hold about them, the sources and means by which you obtained it, the purposes of collection, its planned destination, and whether the database is registered.
- Treat a request under any one of the rights of rectification, updating, erasure and confidentiality as reaching all of them.
These lines are LexLint's reading of the law's text.
What it makes you log
Logging duty
Articles 14 to 16 of the regulation set how a data subject exercises the right of access and the rights of rectification, updating, erasure and confidentiality. They require no log or record and name no audit.
- Kind
- None
- As of
What this law does
Article 14 of the regulation says the request to exercise the right of access needs no specific formula, provided it identifies the data subject, and may be made in person to the controller or by written notice that leaves proof of receipt.
The right of access lets the data subject learn whether they are in the database, all the data held about them, the sources and means by which it was obtained, the purposes for which it was collected, the planned destination of the data, and whether the database is registered as the Act requires. Once the period to answer has expired, the data subject may bring the personal data protection action and report the matter to the control body.
Article 15 requires the controller to answer an access request whether or not it holds data on the person, by any of the means the Act allows at the data subject's option or by the means the requester stated. Article 16 reads the Act's provisions that mention one of the rights of rectification, updating, erasure and confidentiality as referring to all of them.
When LexLint raises it
When your app profile says your app processes personal data.
Back to the example · Lint your app
Page updated .