DPO Guide
Data Protection in Chile

Your starting point in data protection

This guide is for people who take on data protection within their organisation, whether as data protection officer (delegado de protección de datos), compliance lead or member of the data protection team, and who are new to the topic.

The programme is split into 13 workshops. Each workshop has a clear objective, a set of concrete tasks and a result you can verify. The introduction video explains how the guide is built and how to get the most out of it.

How to use this guide

1. Follow the workshops in order. Each workshop builds on the results of the previous ones, especially the records of processing from Workshop 3.
2. Watch the video for each workshop. Every page includes a video explaining the workshop and its tasks.
3. Work through the tasks with your team. Involve HR, IT, sales and marketing; data protection is not just the DPO's job.
4. Document in ResGuard. Each workshop is available in the platform as an objective with tasks, with templates in the policy library.
5. Close out each workshop. Review the result, attach evidence and log open points before moving on.

Everything you need is built into ResGuard

You never start from a blank page: the tool provides everything you need to meet your compliance obligations, and keeps track of it for you.

• Templates for every required policy, procedure and document, and privacy notices generated from your records of processing
• Guidelines: every workshop is a ready-made objective with tasks, expected results and due dates, supported by training slides and videos
• Checklists for the obligations of your jurisdiction, security measures, DPIA risks, data breaches, vendor questionnaires and audits
• Reminders and notifications: policy acknowledgements, training, new requests from individuals and audit questionnaires are followed up automatically by e-mail
• Request Portal: a compliant intake channel where individuals submit their requests online, with response times tracked for you
• Reports: your compliance score and a data protection report for management with one click

The 13 workshops

Foundations

1. 1 Introduction & Applicable Laws Core concepts, applicable laws, programme scope, project team and initial assessment. 2 weeks
2. 2 Governance, Roles & DPO Management commitment, DPO appointment, RACI matrix and reporting to management. 1 week

Inventory & transparency

1. 3 Records of Processing Activities Inventory of all processing: data, data subjects, purpose, legal basis and retention. 3 weeks
2. 4 Privacy Notices & Transparency Inform each group of data subjects where their data is collected. 1 week

Rules & rights

1. 5 Data Protection Policies Overall policy, supporting procedures, approval and employee acknowledgement. 2 weeks
2. 6 Data Retention & Deletion Retention schedule, deletion methods and regular reviews. 1 week
3. 7 Data Subject Requests (ARCOP) Intake channels, identity checks, procedure and response deadlines. 1 week

Risk, security & third parties

1. 8 Risk Assessment & DPIA Find high-risk processing, assess it and apply privacy by design. 2 weeks
2. 9 Technical & Organisational Measures Assess security measures, close gaps and document them. 2 weeks
3. 10 Vendors, Processors & Applications Application and vendor inventory, assessments, contracts and transfers. 2 weeks
4. 11 Data Breach Management Detect, assess and report incidents affecting personal data. 2 weeks

Culture & continuous improvement

1. 12 Awareness & Training Role-based training plan, tracking and ongoing awareness. 1 week
2. 13 Monitoring, Audits & Continuous Improvement Key indicators, internal audits, corrective actions and annual management review. 1 week

Need support?

If your team needs guidance, our Outsourced DPO service can take on the DPO role or support your internal lead throughout the programme.