You are here

Uruguay

Country:
Survey Answer:

Yes. Article 14 of Regulatory Decree 4141/2009 states that personal data may be communicated or disclosed to third parties, only for purposes directly related to the legitimate interest of the sender and recipient, and only with the prior consent of the data subject. The data subject must be informed of the purpose of the communication and the identity of the recipient, or the elements that permit it. This prior consent is revocable.
The same article also sets forth that access to data by a third party/data processor that is necessary for the provision of a service to the data controller is not considered communication or disclosure of data, as long as such access does not involve the existence of a new relationship between the data processor and the data subject.

Provided By:
Martin Pesce, Ferrere Abogados