Regulation

What does Ley 21.719 require?

Chile’s personal data protection law, and the rules of each sector.

What it requires

Chile updates its personal data protection law, published on 13 December 2024: automated decisions, the right to an explanation, and portability.

A person may object to a decision based on automated processing that produces legal effects or significantly affects them, save for exceptions; and in every case the controller must ensure their right to human intervention, to express their point of view and to obtain an explanation (article 8 bis).

From when

It applies from December 2026, unless the pending postponement passes.

Which industries it bears on

  • Banking and financeAn agent that decides about a customer will have to prove what it did and why.
  • Government and multilateralsAgents that touch personal data will have to prove what they did.
  • MiningAn agent that decides about a worker or a contractor will have to prove what it did and why.
  • InsuranceAn agent that decides about a policyholder will have to prove what it did and why.

The rules of each sector the industry pages cite

  • Mining
    • Ley 20.417, Chile: the 2010 law that created the Environment Superintendency (Superintendencia del Medio Ambiente).
    • Resolución Exenta 1.574, Chile: the Environment Superintendency’s general instruction, published in November 2019.
  • Insurance
    • Ley 20.667, Chile: the Insurance Contract Act, in force since 1 December 2013.
    • Norma de Carácter General 309, Chile: corporate governance principles for insurers, issued in 2011 by the Superintendency of Securities and Insurance (SVS), today the Financial Market Commission (CMF).
    • Norma de Carácter General 454, Chile: the CMF’s 2021 rule on operational risk and cybersecurity management.
    • Norma de Carácter General 460, Chile: the CMF’s 2021 rule on insurance sold with credit products.

What a signed record can show

  • TodayThe signed record shows who acted, under whose authorization, and when.
  • 2027 service · 2028 productWith the verifiable evidence package, human oversight, event logging, explanation and data residency are laid out as controls, by obligation.
  • From 2028Rebuilding what the system saw at a given moment and explaining it to the people affected.

Dates are projections of the current development plan, not commitments.

This page summarises public rules and is not legal advice.