Law No. 18,331 on the Protection of Personal Data and Habeas Data provides the following key definitions:

Personal Data

Information of any kind relating to identified or identifiable natural or legal persons.

Sensitive Personal Data

Personal data revealing racial or ethnic origin, political opinions, religious or moral beliefs, trade union membership, or information concerning health or sexual life.

Data Controller

A natural or legal person, public or private, who owns the database or determines the purpose, content, and use of the data processing.

Data Processor

A natural or legal person, whether public or private, who, either individually or jointly with others, processes Personal Data under the instruction and on behalf of the Data Controller.

Processing

Systematic operations or procedures, automated or non-automated, that enable the collection, storage, use, modification, communication, or transfer of personal data.

Database

Any organized set of personal data subject to processing, whether electronic or otherwise, regardless of the method of creation, storage, organization, or access.

Data Anonymization (Data Dissociation)

Processing of personal data in such a way that the resulting information cannot be associated with an identified or identifiable individual.

Data Subject

The natural or legal person to whom the personal data relates.