Chile

Law: Law No. 21.719 Regulating the protection and processing of personal data and creating the personal data protection agency (only available in Spanish here) (Law No. 21.719), reforming Law No. 19.628 on the Protection of Private Life 1999 (only available in Spanish here) (the Law). 

Regulator: Currently, oversight is carried out by the Chilean Transparency Council (CPLT). Law No. 21.719 shall establish the Personal Data Protection Agency, which will be tasked with enforcement of Law No. 21.719 from December 1, 2026. 

Summary: Law No. 19.628 on the Protection of Private Life 1999 (only available in Spanish here) (the Law) was promulgated on August 18, 1999, and governs the data protection framework in Chile. In particular, the Law considers consent as a legal basis for data processing and provides for data subject rights including access, rectification, cancellation, and objection. The Law also addresses personal and sensitive data. However, it does not consider biometric, georeferenced, or minors' data. Notably, the Law neither provides a catalogue of violations, nor establishes an official data privacy authority.

Currently, Law No. 21.719 has been published in the Official Gazette and will enter into force on December 1, 2026. Law No. 21.719 establishes rights for access, rectification, cancellation, or deletion of personal data, and data portability, as well as introducing a new legal basis for data processing, and special categories of personal information. Additionally, it creates the Personal Data Protection Agency, which will be tasked with ensuring compliance with Law No. 21.719 and its enforcement.