Ley N° 7593/2025, tratamiento de datos sensibles y categorías especiales

Ley 7593/2025, arts. 20-23 (datos sensibles, crediticios, videovigilancia y penales)

A citation is an address, not a summary. The first part names the law; what follows narrows it to the exact section, article or paragraph.

What follows is LexLint's own research summary of this law, not legal advice.

In force in 434 days, effective 27 November 2027.

A sensitive categories rule binding public and private bodies.

As of 19 September 2026.

What it requires

This law was enacted on 27 November 2025 but does not take effect until 27 November 2027; what follows applies from that date.
Treat racial or ethnic origin, religious or political belief, health, sexual orientation, genetic data and biometric data used to uniquely identify a person as sensitive data, and process it only on one of the law's narrow grounds.
Do not process sensitive data at all unless one of the narrow grounds article 20 lists applies, such as the data subject's own consent or data the person has made public.
Process data for video-surveillance purposes only as article 22 allows, and data of a criminal nature, sanctions and infractions only as article 23 allows.

What it reaches

Obligation class

Prohibition, Consent, Biometric, Access restriction

What this law does

Drafted with AI from the cited sources under the direction of UnGovr staff. UnGovr holds editorial responsibility for this page.

Article 20 prohibits the processing of sensitive data except on the narrow grounds it lists, such as the data subject's own consent or a case where the person has made the data public. Article 3 defines personal data sensibles to include racial or ethnic origin, religious or political belief, health, sexual orientation, genetic data and biometric data aimed at uniquely identifying a person.

Article 21 governs the processing of credit information data, which Ley N° 6534/2020 continues to regulate in its own right, article 22 processing for video-surveillance purposes, and article 23 the processing of data of a criminal nature, sanctions and infractions. Article 57 enters the law into force twenty-four months after its official publication, so it is enacted and binds nobody until 27 November 2027.

When LexLint raises it

crawls_web
trains_models
processes_biometrics
processes_voice
serves_minors
handles_health_records
provides_financial_services

Read the law

Official text of Ley N° 7593/2025, published by the Biblioteca y Archivo Central del Congreso Nacional (BACN)

Every line above is drawn from the primary source linked here, read on the date shown. This is a research summary, not legal advice.

Back to the example · Lint your app