Your Jurisdiction at a Glance — Chile
Law 21.719 on Personal Data Protection, applicable from 1 December 2026 and replacing Law 19.628
Authority: Personal Data Protection Agency (Agencia de Protección de Datos Personales), created by Law 21.719
- Data breach notification to the Agency
- Voluntary infringement prevention model with a data protection officer, which can reduce fines
- ARCO rights plus portability and the right to object to automated decisions
- International transfers only to adequate countries or with safeguards
- Task 2 of this workshop: document Chile in the data protection scope document, together with sector rules and other countries you operate in
- Workshop 2: governance, roles and the data protection officer
- Workshop 3: records of processing activities
- Workshop 8 and 9: risk assessment and security measures
- Workshop 10: vendors, processors and international transfers
- Workshop 11: data breaches and notification deadlines