Argentina: New classification of infringements and sanctions applicable to violations of the Personal Data Protection Law

In brief

On 5 and 6 December 2022, Resolutions 240/2022 and 244/2022 were published in the Official Gazette. By means of these resolutions, the Access to Public Information Agency (AAIP) contemplates a new classification of infringements and sanctions applicable to conduct in breach of Law 25,326 and its related regulations.


Contents

In focus

The AAIP repealed provisions that regulated sanctions, replaced annexes that provided for the "classification of infringements" and "graduation of sanctions" and repealed the maximum applicable sanction when a condemnatory administrative act includes more than one pecuniary sanction for an identical punishable action within each of the levels of the "graduation of sanctions".

The following are some relevant changes:

  • The AAIP lowered the classification of some actions previously considered serious or very serious infringements. For example: (i) processing of personal data without being registered with the National Registry of Databases ("Registry") was previously considered a serious breach and is now a minor one; and (ii) failure to register a personal database with the Registry when required to do so by the National Directorate for the Protection of Personal Data, and declaration of false or inaccurate data when registering with the Registry, were both previously considered very serious breaches and are now serious breaches.
  • The AAIP increased the fines applicable to minor, serious and very serious infringements while it maintained the maximum fine applicable to very serious infringements (ARS 100,000). For minor infringements, the applicable maximum fine was increased  (from ARS 25,000 to ARS 80,000). For serious infringements, there was an increase to the applicable minimum fine (from ARS 25,001 to ARS 80,001) and the applicable maximum fine (from ARS 80,000 to ARS 90,000). For very serious infringements, the applicable minimum fine was increased (from ARS 80,001 to ARS 90,001). In any event, even if not relevant from a monetary standpoint, these fines may result in reputational damage.
  • The AAIP expanded the criteria to determine the applicable sanctions, including: (i) the acknowledgment or express acceptance of the breach by the offender before the sanction is imposed; (ii)  the economic circumstances of the offender; (iii) the proven adoption of corrective measures and internal mechanisms and procedures capable of mitigating the damage; and (iv) whether the personal data of children and adolescents has been affected.
  • The AAIP raised the maximum limits for applicable fines when a condemnatory administrative act includes more than one pecuniary sanction for an identical punishable actions within each of the levels of the "graduation of sanctions." It provided a maximum limit of ARS 3 million for minor infringements (previously ARS 1 million), a maximum limit of ARS 10 million for serious infringements (previously ARS 3 million), and a maximum limit of ARS 15 million for very serious infringements (previously ARS 5 million).

Click here to access the Spanish version.


Copyright © 2024 Baker & McKenzie. All rights reserved. Ownership: This documentation and content (Content) is a proprietary resource owned exclusively by Baker McKenzie (meaning Baker & McKenzie International and its member firms). The Content is protected under international copyright conventions. Use of this Content does not of itself create a contractual relationship, nor any attorney/client relationship, between Baker McKenzie and any person. Non-reliance and exclusion: All Content is for informational purposes only and may not reflect the most current legal and regulatory developments. All summaries of the laws, regulations and practice are subject to change. The Content is not offered as legal or professional advice for any specific matter. It is not intended to be a substitute for reference to (and compliance with) the detailed provisions of applicable laws, rules, regulations or forms. Legal advice should always be sought before taking any action or refraining from taking any action based on any Content. Baker McKenzie and the editors and the contributing authors do not guarantee the accuracy of the Content and expressly disclaim any and all liability to any person in respect of the consequences of anything done or permitted to be done or omitted to be done wholly or partly in reliance upon the whole or any part of the Content. The Content may contain links to external websites and external websites may link to the Content. Baker McKenzie is not responsible for the content or operation of any such external sites and disclaims all liability, howsoever occurring, in respect of the content or operation of any such external websites. Attorney Advertising: This Content may qualify as “Attorney Advertising” requiring notice in some jurisdictions. To the extent that this Content may qualify as Attorney Advertising, PRIOR RESULTS DO NOT GUARANTEE A SIMILAR OUTCOME. Reproduction: Reproduction of reasonable portions of the Content is permitted provided that (i) such reproductions are made available free of charge and for non-commercial purposes, (ii) such reproductions are properly attributed to Baker McKenzie, (iii) the portion of the Content being reproduced is not altered or made available in a manner that modifies the Content or presents the Content being reproduced in a false light and (iv) notice is made to the disclaimers included on the Content. The permission to re-copy does not allow for incorporation of any substantial portion of the Content in any work or publication, whether in hard copy, electronic or any other form or for commercial purposes.