Law on the Protection of Private Life (Ley sobre Proteccion de la Vida Privada)

Chile's operative regime until December 2026 is Law 19.628, a 1999 statute that predates every modern data-protection model: it permits processing on a broad statutory-authorization basis, has no dedicated supervisory authority (enforcement runs through ordinary civil courts), no administrative fines, and no extraterritoriality clause — so a foreign business without a Chilean establishment is generally outside its practical reach. Data protection was elevated to a constitutional right in 2018 (Law 21.096) without changing this operating framework. This is being replaced in full: Law 21.719, published December 13, 2024, enters into force December 1, 2026 with a GDPR-style targeting test, a new Personal Data Protection Agency, and a sanctions regime — see the pending entry below, and plan against that rather than against Law 19.628 if your compliance horizon runs past 2026.