Ley 25.326 de Proteccion de los Datos Personales — international transfer of personal data

Art. 12 prohibits transferring personal data to countries or international organisations that do not provide an adequate level of protection, subject to listed exceptions. The AAIP, empowered by Decree 1558/2001 to assess adequacy, published its list in Disposicion 60-E/2016 — EU and EEA member states, Switzerland, Guernsey, Jersey, the Isle of Man, the Faroe Islands, Canada (private sector only), New Zealand, Andorra, Israel and Uruguay — and approved model contractual clauses for transfers to controllers and to processors in non-adequate countries. The AAIP has since endorsed the Ibero-American Data Protection Network's standard contractual clauses and issued binding-corporate-rules guidelines, widening the toolkit. Argentina itself holds EU adequacy, which is why its own outbound regime matters to European groups routing data through Buenos Aires. Marked 'check': the operative texts are Spanish-language and the adequacy list is a regulator instrument that changes — confirm the current version rather than relying on the 2016 enumeration.