Decreto 1558/2001, regulation of Ley 25.326: control body, sanction grading and complaint procedure
In force.
An enforcement supervision rule binding public and private bodies.
- Instrument type
- a regulation made under an act
- Obligation class
- Governance, Reporting
- Audit expectation
- on_request
- Who audits it
- Regulator
What it requires
- Give the control body the information, background, documents, programs or other elements about your processing of personal data that it requires, and allow its investigations and inspections.
- Answer within ten working days the control body's request for a report on a complaint or an ex officio action, unless you request in due form an extension of no more than ten further working days.
These lines are LexLint's reading of the law's text.
Who enforces it
Enforcement body
Agencia de Acceso a la Información Pública (AAIP), acting through its Dirección Nacional de Protección de Datos Personales
What it makes you log
Logging duty
Article 31 of the regulation lets the control body inspect and demand information, documents and programs on a complaint or on its own initiative. These are powers to demand information, with no record named, so the regulation imposes no record duty.
- Kind
- None
- As of
What this law does
Article 29 of the regulation, as substituted by Decreto 899/2017, makes the Agencia de Acceso a la Información Pública the control body of Ley 25.326. Under article 31 the size of a sanction is graded by the nature of the personal rights affected, the volume of processing, the benefits obtained, the degree of intent, recidivism, the harm caused to the people concerned and to third parties, and any other circumstance relevant to the degree of unlawfulness and culpability.
The control body opens administrative proceedings for alleged infringements on its own initiative or on a complaint from a person with a particular interest, the Ombudsman of the Nation or a consumer association. A controller asked for a report on a complaint or an ex officio action must answer within ten working days, unless it requests in due form an extension of no more than ten further working days.
Entries in the register of infringers for firm sanctions must be published on the website of the data-protection directorate.
When LexLint raises it
When your app profile says your app processes personal data.
Back to the example · Lint your app
Page updated .