# TRSL Jurisdiction Research: Argentina

**Document status:** Research artifact, Stage 0 (`workplans/TREV-WP-0004-global-jurisdiction-research.md` T04)
**Not legal advice.** Findings drawn from web research (searched 2026-07-29).

---

## 1. Choice-of-law: B2B clauses are respected, consumer protection is not waivable

Argentine courts generally accept party autonomy in choice-of-law clauses for B2B contracts, consistent with the Código Civil y Comercial de la Nación (in force since 2015). However, Argentina's Consumer Protection Law (Ley 24.240, 1993, amended through 2016) is mandatory for consumer contracts and **cannot be waived by a choice-of-law clause** — its protections (joint/strict liability, information duties, restrictions on liability waivers) apply "irrespective of the technological complexity of the product or service."

**Direct implication:** exactly the same recurring pattern already found in every other jurisdiction in this research program — a B2B governing-law clause is respected, but the Commercial-Use-vs-individual-consumer edge case (working default Q2) is where Argentine consumer law would override the CUA's terms. This is now the fourth jurisdiction (after Germany, the EU generally, and implicitly the US via CCPA's former B2B carve-out) where this exact boundary is the operative risk, not a jurisdiction-specific novelty — worth stating in T10's synthesis as a **cross-jurisdictional pattern**, not a per-country footnote repeated five times.

## 2. Data protection: Argentina already has EU adequacy — the easiest jurisdiction for CUA §11 so far

Argentina's Personal Data Protection Law (PDPL, 2000) was the first in Latin America to receive an EU adequacy decision, granted in 2003 and reconfirmed in a January 2024 review citing Argentina's accession to Council of Europe Convention 108/108+, clear public-authority-access rules, and an independent supervisory authority. Because of this adequacy status, **EU-to-Argentina personal data transfers require no additional safeguards** (no SCCs needed) — a materially simpler position than most other non-EU jurisdictions in this research program.

**Direct implication:** for CUA §11's eventual Data Processing Addendum, an Argentine Customer is one of the lowest-friction cases found so far — the PDPL's substantive alignment with GDPR-style concepts plus the standing adequacy decision means a shared EU/Argentina data-processing approach is plausible, unlike the UK (diverging, per the Germany/EU/UK deepening passes) or (as will be checked) China (expected to be materially stricter).

## 3. Summary for the WP-0004 feasibility matrix (T10)

| Question | Argentina |
|---|---|
| B2B choice-of-law enforceable? | Yes, generally respected under the Código Civil y Comercial |
| Consumer-contract carve-out risk? | Yes — Ley 24.240 is mandatory and non-waivable, same recurring Q2 edge case |
| Data protection regime | PDPL (2000), EU-adequate since 2003, reconfirmed 2024 — low friction relative to most jurisdictions researched so far |
| Distinct from broader Latin America? | Not yet checked — this task researched Argentina specifically, per the workplan's own caution against over-generalizing to the region |

## 4. Open items for T10 synthesis

- Confirm whether other major Latin American economies (Brazil's LGPD, Mexico) share Argentina's EU-adequacy status or diverge — Brazil's LGPD in particular is modeled on GDPR but Brazil itself does not (yet) hold an EU adequacy decision, a meaningful difference from Argentina; not researched in this pass.
- The recurring "B2B respected, consumer law mandatory" pattern across Germany/EU, US (via CCPA), and now Argentina suggests CUA Appendix A item 1 (governing law) and the Q2 commercial-use definition are more tightly linked than previously stated — recommend the T10 synthesis treat them as one combined risk area rather than two separate open items.