Ley Especial contra los Delitos Informáticos, privacy of personal data and communications (Arts. 20-22)
LECDI, Gaceta Oficial N° 37.313, 30/10/2001, arts. 20-22
A citation is an address, not a summary. The first part names the law; what follows narrows it to the exact section, article or paragraph.
In force since 29 November 2001.
An enforcement supervision rule binding public and private bodies.
As of 5 September 2026.
What it requires
- Do not appropriate, use, modify, or delete a person's personal data or information held in a computer system without their consent.
- Do not access, intercept, or reproduce a person's private data message, transmission, or communication signal without authorization.
- Do not reveal, disseminate, or transfer facts, images, audio, or data obtained through either of the conduct above.
If you get it wrong
Criminal exposureYes
Criminal exposure note
Article 20 (data privacy): imprisonment of two to six years and a fine of two hundred to six hundred tax units (unidades tributarias), increased by a third to a half if harm results. Article 21 (communications privacy): the same imprisonment and fine range. Article 22 (improper disclosure): the same range, increased by a third to a half if made for profit or if harm results.
What it reaches
Obligation class
Consent, Disclosure, Access restriction
What this law does
Drafted with AI from the cited sources under the direction of UnGovr staff. UnGovr holds editorial responsibility for this page.
Article 20 punishes anyone who intentionally appropriates, uses, modifies, or deletes, by any means and without the owner's consent, another person's personal data or information, or data in which they have a legitimate interest, held in a computer or system that uses information technology, with the penalty increased by a third to a half if the conduct causes harm to the data's holder or a third party.
Article 21 separately punishes accessing, capturing, intercepting, interfering with, reproducing, modifying, diverting, or deleting another person's data message or transmission or communication signal through the use of information technology.
Article 22 punishes revealing, disseminating, or transferring, in whole or in part, the facts discovered, images, audio, or data or information obtained through the conduct articles 20 and 21 describe, with a heavier penalty where the disclosure was for profit or caused harm to another. No dedicated data-protection supervisory authority exists; these criminal offences are the operative statutory sanction for a privacy violation in the absence of a civil regime.
When LexLint raises it
crawls_webtrains_modelsautomated_outreach