Changes in Structure of the Argentine Data Protection Authority

The Argentine Data Protection Authority, under Article 3 of Administrative Decision No. 1094, entitled the head of the Agency to approve a lower-level organization structure of up to six (6) directorates and four (4) coordination departments. Among the new directorates under the sphere of the Data Protection Authority, the Directorate of Promotion of the Right to Privacy and the Directorate of Control and Regulation were created.

Some of the actions to be carried out by the Directorate of Promotion of the Right to Privacy include, among others:

• assisting the Data Protection Authority in drafting of policies and regulatory frameworks regarding data governance and internet privacy,
• coordinating research and comparative studies,
• providing authorities with technical assistance and advice,
• participating in training and communication on data protection,
• standardizing privacy policies of persons subject to such requirements,
• advising on updates to data protection regulations,
• promoting programs to protect children’s personal data online,
• promoting privacy education in all levels of education,
• designing strategies for the prevention of digital violence related to data privacy,
• assisting data subjects in the exercise of their rights,
• participating in the creation of standards regarding data processing.

On the other hand, the Directorate of Control and Regulation will:

• assist the Data Protection Authority in monitoring compliance with Law No. 25326 on Data Protection and with Law No. 26951 on National “Do Not Call” Registry,
• coordinate investigations of potential violations to the Data Protection Law,
• participate in the creation of inspection plans, in the visits to public and private entities (as defined in those plans), and in writing reports on the findings,
• assist in managing the “Do Not Call” Registry,
• assist in the operation and functioning of the public and private registries established in the Data Protection Law,
• address citizen inquiries,
• plan policies for data privacy and protection,
• assist on the analysis and drafting of regulatory proposals and technical reports of the areas under its scope,
• promote voluntary dispute resolution mechanisms between data subjects and those responsible for processing their data.