Consequences of Non-Compliance

Key Concept 6 — Consequences of Non-Compliance

Fines are only one of the risks — trust is often the bigger loss.

Most enforcement cases start with something avoidable: a security gap, a missing legal basis, an unanswered request from a customer or a complaint from an employee.

Typical consequences

Fines by the data protection authority, often based on turnover or on a fixed unit
Orders from authorities: stop a processing activity, delete data, change a system — which can halt a business process overnight
Claims for damages by the affected people, in some countries also through class actions or consumer associations
Loss of trust of customers, employees and business partners, and negative press
Business impact: lost tenders, failed due diligence and stricter requirements from customers
Personal liability of managers and employees under some laws

Sanctions in your jurisdiction

Chile

Supervisory authority: Personal Data Protection Agency (Agencia de Protección de Datos Personales), created by Law 21.719

Fines graded by severity: up to 5,000 UTM (minor), 10,000 UTM (serious) and 20,000 UTM (very serious)
Higher fines for repeat offences, for large companies up to 4% of annual income
Entry in the national register of sanctions