Government Publishes Regulation Governing Personal Data Infringement Prevention Models

On September 9, 2026, Decree No. 662/2025 of the Ministry of Finance was published, approving the Regulation on Infringement Prevention Models pursuant to Article 49, as incorporated into Law No. 19,628 on the Protection of Private Life by Law No. 21,719 (the “Regulation”).

The Regulation establishes a prevention framework for controllers aimed at ensuring compliance with applicable data protection requirements and protecting data subjects’ rights. It also sets forth the requirements and procedures for the implementation, certification, registration and supervision of such models, and serves as a practical guide for regulatory compliance.

The adoption of a certified infringement prevention model constitutes, pursuant to Article 35(5) of Law No. 21,719, a mitigating circumstance in relation to sanctions that may be imposed by the Personal Data Protection Agency (the “Agency”).