Chile Personal Data Protection Law (Law No. 21.719)
GDPR-aligned reform of Law 19.628 published December 2024: creates the Personal Data Protection Agency, lawful bases, data subject rights, cross-border transfer rules and fines up to 4 percent of annual revenue. Applies from 1 December 2026.
| Jurisdiction | Chile |
|---|---|
| Category | Privacy & Data Protection |
| Status | Upcoming |
| Effective date | |
| Latest development |
Recent developments
- — A late-August/early-September jurisdiction update says Law No. 21.719 will enter into force on 2026-12-01 and that the older Law No. 19.628 remains operative until then. The page frames this as the current baseline for Chile’s privacy regime while the reform waits to take effect. (source)
- — This update says the law is set to enter into force on 2026-12-01, but notes a government bill before the Senate would postpone implementation to 2027-12-01. It is the clearest recent signal of possible legislative change to the timeline. (source)
- — A late-August industry explainer highlights the coming December 2026 start date, the new data protection agency, stronger rights, and fines of up to 20,000 UTM. It reflects growing private-sector focus on compliance readiness before the law takes effect. (source)
- — This report says the general entry into force of Law 21.719 remains set for 2026-12-01 and discusses its extraterritorial reach, including entities offering goods or services in Chile. It underscores the operational impact for foreign companies and cross-border processors. (source)
- — An August industry article says Chile’s Personal Data Protection Law will take full effect on 2026-12-01 after the transition period from its December 2024 publication. It also emphasizes the significant sanctions regime, which is driving compliance planning. (source)
- — This legal update describes the regime as having moved into an active implementation phase, with expanded rights, stronger principles such as purpose limitation, and a new supervisory authority. The framing suggests businesses are already adjusting internal governance and data-handling practices. (source)
- — This mid-year analysis presents Law 21.719 as creating a dedicated enforcement agency and raising compliance stakes for organizations handling Chilean personal data. It is representative of broader industry attention to enforcement risk and operational changes. (source)
- — This article summarizes the law’s practical obligations for organizations, including lawful basis requirements, specific purpose limitations, and sanctions up to 20,000 UTM for very serious infringements. The focus is on compliance impacts across sectors and company sizes. (source)
- — This global legal tracker notes that Law 21.719 modernizes Chile’s regime and is scheduled to enter into force on 2026-12-01. It also highlights core policy changes such as new legal bases for processing, international transfer rules, and accountability-style requirements. (source)
- — This update says Senate Bill No. 18.060-07 proposes significant amendments to Law No. 21.719 before its December 2026 entry into force. The report indicates the law’s final shape may still change, which is the most material recent policy-development risk. (source)
Related regulations
- UK Data Protection Act 2018 — United Kingdom, Active
- Texas Data Privacy and Security Act (TDPSA) — Texas, Active, effective 2024-07-01
- General Data Protection Law (LGPD) — Brazil, Active, effective 2020-09-18
- COPPA (Children's Online Privacy Protection Act) — United States, Active
- Oregon Consumer Privacy Act (OCPA) — Oregon, Active, effective 2024-07-01
- Montana Consumer Data Privacy Act (MCDPA) — Montana, Active, effective 2024-10-01
- New Hampshire Privacy Act (NHPA) — New Hampshire, Active, effective 2025-01-01
- Nebraska Data Privacy Act (NDPA) — Nebraska, Active, effective 2025-01-01
Put it into practice
- Generate the policy: GDPR policy generator (generatepolicy.com)
- Buy the policy pack: Privacy Program Bundle (cyberpolicy.shop)
- Build it yourself: Privacy Dual Coverage Bundle (ciso.diy)
Browse all regulations · Compliance deadlines · Latest updates