The framework
Argentina's framework rests on the Personal Data Protection Law 25.326, adopted in 2000, with the AAIP as the supervisory authority.
That puts Argentina in the global opt-in majority, where permission comes before processing and marketing waits for consent.
Key instruments
Personal Data Protection Law 25.326
Latin America's original comprehensive law (2000) and one of only two in the region with EU adequacy. A GDPR-grade replacement bill has been introduced repeatedly, most recently in 2023, without passage; the AAIP compensates with active resolutions and guidance.
Marketing and advertising
Consent-first with listed exceptions; the do-not-call registry and marketing opt-outs are enforced. That single sentence decides most channel plans here.
Cross-border transfers
Adequacy-based; Argentina itself holds an EU adequacy decision, reaffirmed in the EU's 2024 review.
Enforcement and penalties
Administrative fines updated by the AAIP; modest by global standards.