On the Horizon — Not Yet Law
Law No. 21.719 regulating the protection and processing of personal data and creating the Personal Data Protection Agency
A GDPR-style rebuild of Chilean data protection. It applies to controllers and processors operating from Chile, to processors handling data on behalf of a Chile-based controller, and — extraterritorially — to controllers or processors located outside Chile whose processing targets people in Chile by offering goods or services to them or monitoring their behavior. It introduces lawful bases beyond consent (contract performance, legitimate interest), a defined category of sensitive data, data-subject rights including access, rectification, deletion and portability, breach notification, and a tiered fine regime running to 20,000 UTM for very serious infringements. The creation of an independent Personal Data Protection Agency is the structural change: Chile moves from court-only enforcement to a supervisory authority with administrative sanctioning power.
Status: Published December 13, 2024 with a 24-month vacancy period. As enacted it enters into force December 1, 2026, at which point it replaces Law 19.628 in full and the new Agencia de Proteccion de Datos Personales assumes enforcement, including the sanctions regime. That date is now contested. Boletin 18.623-07, a presidential Mensaje (N° 110-374) to the Senate dated August 31, 2026, would amend the first transitory article to replace the 24-month vacancy with a fixed entry-into-force date of December 1, 2027 (Articulo unico, numeral 2). The same bill enlarges the Agency's Consejo Directivo from three to five members, requires the first councillors to be appointed at least twelve months before entry into force, and removes the small-business-only limitation on written admonition in the sixth transitory article. The postponement is NOT law: until Boletin 18.623-07 is passed and published, December 1, 2026 remains the operative date and businesses serving Chilean customers should keep building against it. VERIFIED against the bill text (Camara de Diputados document, prmID 18854). The Senate tramitacion record for Boletin 18.623-07 shows the bill entering the Senate on September 1, 2026 as its first constitutional tramite, still 'en tramitacion' with no vote as of September 11, 2026 - which leaves under three months to the operative date. Still not confirmable: whether the bill carries an urgencia. Press reports describe it as filed with 'suma urgencia', but no urgencia appears on the Senate record, and urgency is designated by separate oficio - treat the claim as unconfirmed.
December 1, 2026 (Boletin 18.623-07 would move this to December 1, 2027; not yet law)
This is a general reference, not legal advice or a determination that this law applies to your specific business. Run the full questionnaire to check against your actual presence, activities, and data types.