Home Practice Areas About Us FAQ Contact Book your legal consultation
Home/Legal Audit & Compliance/Data Protection Compliance
Audit & Compliance

Data Protection Compliance in Chile

We map what your Chilean entity actually collects and processes, and tell you what has to change to comply.

What this involves

Chile passed Law 21.719, which modernizes the country's personal data framework along GDPR-style lines — defined legal bases for processing, stronger data subject rights, and real consequences for non-compliance — and takes full effect in December 2026. Until then, the current Law 19.628 already imposes real obligations, and companies operating on assumptions from the older regime frequently discover gaps once the incoming requirements are mapped against what they actually do.

We start by finding out what data your Chilean entity collects, on what legal basis, and where it goes from there — then tell you precisely what your contracts, notices and vendor arrangements need to change.

What we handle

Data mapping

Identifying what personal data your Chilean entity collects, processes and shares, and with whom.

Legal basis review

Confirming each processing activity has a valid legal basis under current Chilean requirements.

Privacy notices

Updating customer- and employee-facing notices to reflect what you actually do with their data.

Contracts & vendor arrangements

Reviewing and updating data processing terms with vendors and partners.

Breach response

Preparing the internal process for responding to a data incident before one happens.

How we run this for a client abroad

01

Mapping remotely

Data mapping and interviews conducted online with your Chilean team and IT function.

02

Gap report & plan

A prioritized report you can review with your global privacy or legal team, in English.

03

Local implementation

Our attorneys draft and file the documents required under Chilean law.

Data Protection Compliance — common questions

What English-speaking clients ask us most about this specific service.

Does Chile have a GDPR-style data protection law?
Yes. Chile passed Law 21.719, which brings the country's data protection framework closer to the international standard set by GDPR-style regimes and takes full effect in December 2026. Until then, the current Law 19.628 already applies, and companies used to the lighter historical regime often have real gaps once the incoming requirements are mapped against actual practice.
When does Law 21.719 take effect in Chile?
Law 21.719 enters into general effect in December 2026. Companies that put their compliance processes in place before that date avoid penalties and arrive at the new regulatory framework already prepared.
Does this apply to a foreign company with no Chilean data center?
Generally yes, if your Chilean entity collects or processes personal data of individuals in Chile, regardless of where the servers sit. Obligations attach to the processing activity and the entity responsible for it, not to the physical location of the infrastructure.
What are the penalties for non-compliance?
Penalties scale with the severity and nature of the breach and can be significant for serious or repeated violations. Beyond direct fines, a poorly handled data incident carries reputational and contractual exposure with customers and partners who increasingly require compliance evidence themselves.
How long does a compliance project like this take?
A data mapping and gap assessment typically takes a few weeks; implementing the resulting changes — updated notices, contracts and vendor terms — depends on how many systems and third parties are involved. We phase the work so the highest-risk gaps are closed first.

Talk to a data protection lawyer in Chile

Get an initial assessment in English — confidential, with no obligation.

Book your consultation now →
WhatsApp+56 9 5217 5304
Emailhola@oklegal.cl
HoursMon–Sat 09:00–20:00