Data Protection Atlas

Chile

Tier 2 Comprehensive law Americas

Principal framework: Law 21.719 (fully in force Dec 2026) (2024). Regulator: Personal Data Protection Agency (from 2026). Law 21.719 (2024) applies in full from 1 December 2026, creating Chile’s first dedicated DPA — the Agencia de Protección de Datos Personales.

At a glance

Principal law
Law 21.719 (fully in force Dec 2026)
Regulator
Personal Data Protection Agency (from 2026)
Breach notification
Notify the Agency without undue delay under Law 21.719
Maximum penalty
Up to 20,000 UTM; repeated gross breaches up to 4% of annual turnover
DPO required
DPO required in defined cases
Digital consent age
14 for a minor’s own consent
Extraterritorial reach
Yes — targeting people in Chile

Structure

Structural pattern
Not assessed
Sub-jurisdictions
None — no sub-national axis
ISO code
CL

A Pattern 4 jurisdiction has no sub-national layer to model. Devolution elsewhere in the legal system does not imply it here — check each Act rather than reasoning from the country.

Transfers and adequacy

EU member
No
EEA member
No

Instruments

No instrument profiled yet.

Sources

Never independently verified — seeded from the prototype.