Uruguay

Yes, under the principle of legality, the formation of a database will be lawful if the database is properly registered. According to the Regulation the registration of databases must be done under specific criteria, established in separate regulations, such as: • Identification of the database and of the data controller;
• The nature of personal data it contains;
• Procedures for obtaining and processing the data;
• Security measures and technical description of the database;
• Protection of personal data and exercise of privacy rights;
• Destination of the data, and to whom the data may be transmitted;
• Duration of data retention; and
• Form and conditions under which people can gain access to data related to them and have the data corrected or updated.

Should these requirements be not met; administrative sanctions provided for in the Data Protection Act may be applied.