On January 28, the URCDP joins in celebrating the International Day for the Protection of Personal Data, and highlights the importance of people knowing their rights, obligations and the mechanisms to protect their personal data.
In Uruguay, Law No. 18,331 of August 11, 2008, recognizes the protection of personal data as a fundamental right included in the Constitution, grants people a set of rights over the use of their data and creates obligations for companies, public bodies and individuals responsible for the processing of personal data.
In addition, the law establishes that the URCDP is the supervisory body to ensure compliance with the regulations, and the body that receives complaints regarding possible non-compliance in the processing of personal data.
What is personal data?
Personal data is any type of information that can identify or make a person identifiable, and affect their personal, social or professional environment. Some examples may be: name, address, telephone number, identity card, fingerprint, image, voice, among others. Law No. 18,331 applies to all personal data recorded on any medium that makes them susceptible to processing and any form of subsequent use by the public or private spheres.
Do you know your rights?
The rights to the protection of personal data regulated by law allow people to request information about the way in which their data is being processed, access it, ask for its update, rectification or deletion, and obtain an explanation in the event that automated processing is being carried out. The exercise of these rights involves submitting a request to the companies, public bodies or individuals responsible for data processing. The request must be answered within a maximum period of 5 business days.
- Access the form to exercise the right of access
- Access the rectification, modification or deletion form
Any breach of the provisions of the law may be reported to the URCDP. For questions or queries, please write to the following email address:
infourcdp@datospersonales.gub.uy
Do you know your obligations?
There are obligations that companies, public bodies and individuals who collect or use personal data in any way must comply with. These are: registering their databases, establishing privacy policies on websites, communicating in the event of security breaches, and appointing a data protection officer – if applicable –, among other provisions provided for in the law and its regulations.
International Day for the Protection of Personal Data
The commemoration of this day arose with the signing of the “Convention 108” of the Council of Europe in 1981, the first legally binding international instrument that aims to guarantee the protection of individuals with respect to the processing of their personal data. Uruguay has been a party to the Convention since 2013 and recently signed and approved the new modernization protocol, known as Convention 108+.
https://www.gub.uy/unidad-reguladora-control-datos-personales/comunicacion/noticias/conoce-tus-derechos-cuida-tus-datos-personales