LAW
Data Protection Act Law No. 18.331 (11 August 2008); Decree No.
414/009 (31 August 2009) (the
"Act").
DEFINITION OF PERSONAL DATA
Any kind of information related to a person or legal entity
identified or identifiable.
DEFINITION OF SENSITIVE PERSONAL DATA
Any kind of personal data evidencing: racial or ethnic origin,
political preferences, religious or moral beliefs, trade union
membership and any kind of information concerning health or sexual
life.
NATIONAL DATA PROTECTION AUTHORITY
("URCDP", Unidad Reguladora de
Control y Actos Personales ("Data Protection
Authority").
REGISTRATION
Every database must be registered with the Data Protection
Authority in Uruguay if the information contained in the database
is gathered or obtained through means, mechanisms or sources
located in Uruguay.