← Data protection and cybercrime laws by country, compared

Uruguay: data protection law, cybercrimes, fines and penalties

Law 18.331/2008 overseen by the URCDP, with EU adequacy and 72-hour breach notification.

Law

Ley 18.331 (2008) – Personal Data Protection Law

Authority

URCDP (Unidad Reguladora y de Control de Datos Personales)

Max fine

—

Breach notification

72h (Ley 19.670/2018)

DPO

—

Risks

• 72-hour breach notification
• EU-aligned regime (EU adequacy)

Source: URCDP