Why does this field exist?
Name the task, minimum information, source, audience, notice, choice, and any sensitive or unnecessary data the interface should reject.
Personal data board
Uruguay personal-data questions may involve purpose, notices, lawful handling, registration, processors, transfers, rights, security, retention, and incidents. The actual product and organisation determine what applies; software should implement the approved model consistently.
Name the task, minimum information, source, audience, notice, choice, and any sensitive or unnecessary data the interface should reject.
List roles, support access, processors, AI tools, automated steps, exports, integrations, and the approval needed for each use.
Place hosting, subprocessors, email, analytics, logs, backups, remote access, transfer questions, and manual spreadsheets on the board.
Define correction, access, deletion, account closure, retention expiry, backup aging, security investigation, escalation, and communication evidence.
Use the interface to prove the policy works.
Test refusal and changed preferences, required versus optional fields, role removal, vendor failure, a rights request, deletion across copies, and incident investigation. A privacy document that cannot be demonstrated in the system is an unfinished decision.
Measurement boundary
It records traffic and direct phone or email click events. That separate measurement does not settle notice, consent, retention, transfer, vendor, or user-right questions for this or another product. Extra advertising or profiling tags are not silently included.
The URCDP portal is an official starting point; a qualified owner determines applicability.