The Personal Data Protection Law 25,326 (PDPL), Regulatory Decree 1558/2001, and other provisions issued by the National Directorate for Personal Data Protection comprise the current main legal framework of Argentine Data Protection Regulations.
The PDPL outlines obligations and principles related to data processing, including on security and the transfer of data internationally between data controllers or data processors. As the PDPL only applies to reporting databases (PDPL, Section 1), we believe that the PDPL is not applicable to Google in connection with the provision of Google Cloud services.
If a customer determines that the PDPL is applicable to them, it is their responsibility to ensure their compliance. As a part of their compliance assessment, customers can use the information provided below to learn how information is stored, processed, maintained, accessed, and secured in Google Cloud when they use Google Cloud Platform and Google Workspace.
Security of the services
Google operates global infrastructure designed to provide state-of-the-art security through the entire information processing life cycle. Google Cloud Platform and Google Workspace run on this infrastructure. A detailed discussion of our infrastructure security can be found in our Google Infrastructure Security Design Overview whitepaper.
Data Processing Agreements: Our data processing agreements for Google Cloud Platform and Google Workspace clearly articulate our privacy commitments to our customers.
Processing According to Instructions: Any data that a customer and its users put into our systems will only be processed in accordance with the customer’s instructions, as described in our data processing agreements.
Personnel Confidentiality Commitments: All Google employees are required to sign a confidentiality agreement and complete mandatory confidentiality, privacy, and Google Code of Conduct training.
Data Subject’s Rights: Data controllers can use the Google Workspace and Google Cloud Platform administrative consoles and services functionality to help access, rectify, restrict the processing of, or delete any data that they and their users put into our systems.
Standards & Certifications: Google Cloud regularly undergoes several independent third-party audits of its security, privacy, and compliance controls.