Ley 21.719, Regula la Protección y el Tratamiento de los Datos Personales
Ley 21.719 Regula la Protección y el Tratamiento de los Datos Personales y Crea la Agencia de Protección de Datos Personales (Boletines 11.092-07 y 11.144-07, refundidos)
A citation is an address, not a summary. The first part names the law; what follows narrows it to the exact section, article or paragraph.
In force in 76 days, effective 1 December 2026.
A comprehensive regime rule binding public and private bodies.
As of 2 September 2026.
What it requires
- From 1 December 2026, obtain a lawful basis before processing personal data of a person in Chile; this obligation does not yet bind as of this writing.
- Prepare to register and report to the new Agencia de Protección de Datos Personales once the law commences; the current regulator structure under Ley 19.628 does not yet include a dedicated data-protection authority.
What this law does
Drafted with AI from the cited sources under the direction of UnGovr staff. UnGovr holds editorial responsibility for this page.
Ley 21.719 replaces Ley 19.628 with a General Data Protection Regulation (GDPR)-influenced comprehensive regime covering both public and private-sector processing and amends Ley 20.285 (public information access) and Ley 19.496 (consumer protection) in the same act.
It was promulgated 25 November 2024 and published in the Diario Oficial 13 December 2024, but its own transitory provisions delay commencement of the substantive amendments to the twenty-fourth month after publication, which the primary source's own version banner confirms as 1 December 2026; the law is therefore enacted but not yet in force. It has already been amended once before taking effect, by Ley 21.806 (5 February 2026).
When LexLint raises it
crawls_webtrains_modelsdeploys_chatbotautomated_outreachprocesses_biometrics