The Uruguay’s data protection authority, URCDP, has removed the US from the list of appropriate territories as part of its amendment.
Announced on September 16, the URCDP has published Resolution No. 23/021 of June 8, 2021, which establishes important changes in the international data transfer regime in Uruguay.
Within the framework of the powers provided by the Law, the Unit can determine the appropriate territories for the transfer of personal data without requiring prior administrative authorizations.
This resolution replaces Resolution No. 4/019, of March 12, 2019, and excludes the US from the appropriate territories, suggesting the use of other mechanisms such as contractual clauses and other elements to justify the transfer, giving a period of six months for the companies to make this justification before the Unit.
To collaborate with those data controllers and processors, Resolution No. 41/021, of September 8, 2021, was published, which includes a guide for the drafting of contractual clauses.
Don’t miss PrivSec Global tomorrow, a two-day live and on-demand livestream experience.
Must see sessions include:
International Data Flows: Key Cases and Decisions since Schrems II and what have we learnt? | 22 September at 3pm BST | 4pm CEST
International Data Flows: The Future Under the New SCCs | 22 September at 5pm BST | 6pm CEST
International Data Flows: EU and UK data flows: The Future of the Post-Brexit Agreement | 23 September at 2pm BST | 3pm CEST