Chile Personal Data Protection Law (Ley 21.719)
Enacted Chile · In force Dec 1, 2026 · next deadline Dec 1, 2026 (in 2 months)
Deadlines
Summaries for reference, not legal advice. Check the official text.
What it does
Replaces Chile's 1999 data law with a GDPR-style regime: legal bases, data subject rights (including portability and objection to automated decisions), security and breach notification, international transfer rules, a voluntary compliance (crime-prevention-style) model, and a new independent Personal Data Protection Agency.
- Who it applies to
- Controllers and processors established in Chile, and those outside Chile offering goods/services to or monitoring individuals in Chile. No size threshold (graduated fines for small businesses).
- Penalties
- Fines up to 5,000 UTM (minor), 10,000 UTM (serious) and 20,000 UTM (very serious) infringements; repeat serious/very serious infringements by larger companies can reach a percentage of annual revenue (up to 4%) per secondary sources.
- Enforced by
- Agencia de Protección de Datos Personales
- Official name
- Ley Nº 21.719 que regula la protección y el tratamiento de los datos personales y crea la Agencia de Protección de Datos Personales
- Citation
- Ley Nº 21.719 (Diario Oficial 13 Dec 2024)
- Topics
- privacy, breach-notification
Research notes
Fact-check 2026-09-22 against BCN LeyChile metadata: promulgated 25 Nov 2024 ('Santiago, 25 de noviembre de 2024'), published in the Diario Oficial 13 Dec 2024, deferred entry into force 1 Dec 2026 (first day of the 24th month after publication, transitional Art 1). Pending amendment: government bill Boletin 18623-07 (filed 1 Sep 2026 with 'suma' urgency, Senate Constitution Committee first report stage) would postpone entry into force to 1 Dec 2027 and require the Agency's first board appointments at least 12 months before; a separate member's bill 18060-07 (Jan 2026) is also in committee. Until enacted, 1 Dec 2026 remains the legal date.
Related
Brazil ECA Digital
Canada Bill C-36 (PPCDA)
Quebec Law 25Questions about Chile Personal Data Protection Law (Ley 21.719)
- What are the Chile Personal Data Protection Law (Ley 21.719) compliance deadlines?
- Dec 13, 2024: Published in Diario Oficial. Dec 1, 2026: Law in force. Dec 1, 2027: Proposed postponement of entry into force (tentative).
- When does Chile Personal Data Protection Law (Ley 21.719) take effect?
- Chile Personal Data Protection Law (Ley 21.719) takes effect on Dec 1, 2026. The next milestone is Dec 1, 2026: Law in force.
- Who does Chile Personal Data Protection Law (Ley 21.719) apply to?
- Controllers and processors established in Chile, and those outside Chile offering goods/services to or monitoring individuals in Chile. No size threshold (graduated fines for small businesses).
- What are the penalties under Chile Personal Data Protection Law (Ley 21.719)?
- Fines up to 5,000 UTM (minor), 10,000 UTM (serious) and 20,000 UTM (very serious) infringements; repeat serious/very serious infringements by larger companies can reach a percentage of annual revenue (up to 4%) per secondary sources.