Ley 25.326, sensitive data categories and health data

Ley 25.326, arts. 7-8 (sensitive data categories and health data)

A citation is an address, not a summary. The first part names the law; what follows narrows it to the exact section, article or paragraph.

What follows is LexLint's own research summary of this law, not legal advice.

In force since 30 October 2000.

A sensitive categories rule binding public and private bodies.

As of 19 September 2026.

What it requires

Do not require a person to provide sensitive data (racial or ethnic origin, political opinions, religious, philosophical, or moral convictions, union membership, or health or sexual-life information).
Collect and process sensitive data only for a reason of general interest authorized by law, or for statistical or scientific purposes where the data subject cannot be identified.
Do not form a file, bank, or registry whose purpose is to store information that directly or indirectly reveals sensitive data, unless it is a membership registry a church, religious association, or political or union organization keeps of its own members.
Process a person's criminal or administrative-offense record only if you are a competent public authority acting under the applicable laws and regulations.
As a health establishment or health professional, collect and process a patient's physical or mental health data under the rules of professional secrecy.

What it reaches

Obligation class

Prohibition, Access restriction

What this law does

Drafted with AI from the cited sources under the direction of UnGovr staff. UnGovr holds editorial responsibility for this page.

Article 7.1 bars requiring any person to provide sensitive data, defined in article 2 as data revealing racial or ethnic origin, political opinions, religious, philosophical, or moral convictions, union membership, or health or sexual-life information; article 7.2 permits collecting and processing it only for reasons of general interest authorized by law, or for statistical or scientific purposes where the data subject cannot be identified.

Article 7.3 bars forming a file, bank, or registry whose purpose is to store information that directly or indirectly reveals sensitive data, but excepts a membership registry the Catholic Church, a religious association, or a political or union organization keeps of its own members. Article 7.4 confines processing of a person's criminal or administrative-offense record to the competent public authorities acting under the applicable laws and regulations.

Article 8 lets a public or private health establishment, or a health professional, collect and process a patient's physical or mental health data under the rules of professional secrecy. The Act's closed sensitive-data list names no biometric identifier, so a faceprint, fingerprint, or voiceprint falls within the Act's general rules rather than this heightened regime.

When LexLint raises it

crawls_web
trains_models
generates_content
handles_health_records

Read the law

Official consolidated text of Ley 25.326, InfoLEG (Ministerio de Justicia y Derechos Humanos)

Every line above is drawn from the primary source linked here, read on the date shown. This is a research summary, not legal advice.

Back to the example · Lint your app