Privacy & Information Security Law Blog

On November 18, 2016, the Argentina Data Protection Agency (“DPA”) announced that it had issued DNPDP Disposition 60 –  a new regulation on international transfers of personal data (the “Regulation”). 

The Regulation approves two model forms for the international transfer of data – one for use with transfers to a data controller and another for use with transfers to a data processor, for rendering services. This model is based partly on the EU model; if the data controller wishes to use a different model, the controller must file a request for approval with the DPA within 30 days. The Regulation also lists countries that are considered “adequate” for purposes of cross-border data transfers, using the list of countries recognized as adequate by the EU.

This post will be updated as more information becomes available.