Uruguay's data protection authority, the Unidad Reguladora y de Control de Datos Personales, announced updates to its international data transfer regime. The URCDP removed the U.S. from the list of eligible territories to establish data flows with. The regulator also recommended appropriate transfer mechanisms, including standard contractual clauses and consent of the interested parties, while instituting a six-month period to apply mechanisms to existing data flows. Additionally, a guide was issued for drafting standard contractual clauses.
20 Sept. 2021
Uruguay amends data transfer scheme
RELATED STORIES
Privacy in Arkansas: Is Arkansas ready for a consumer privacy law?
A view from DC: CFPB calls for states to regulate financial privacy
Notes from the IAPP Canada: OPC's WADA investigation 'raises some interesting issues'
A view from Brussels: European Commission's new tech policy center of gravity
First fine imposed under Thailand's Personal Data Protection Act