Page traduite et vérifiée automatiquement. La version anglaise fait foi. Certaines parties restent en anglais le temps que leur traduction soit vérifiée. Voir en anglais · Signaler une erreur de traduction
Réglementations › Reste du monde › Chili
LPVP
Loi 19,628 sur la protection de la vie privée, telle que modifiée par la loi 21,719
QuandEn vigueur depuis le 28 août 1999
Qui en assure l’applicationAgence de protection des données personnelles (à partir du 1er déc. 2026 ; les tribunaux civils assurent l’application jusqu’à cette date)
À qui elle s’appliqueOrganismes publics et privés qui effectuent un traitement de données personnelles au Chili.
Informer le régulateurAucune obligation de notification des violations dans le texte actuel
DPO requisNon traité
EnregistrementAucun enregistrement pour les responsables du traitement privés
Transferts à l’étrangerAucune restriction des transferts internationaux dans le texte actuel
Délai de réponse aux demandesLe responsable du traitement doit répondre dans un délai de 2 jours ouvrables, à défaut de quoi le titulaire peut saisir le tribunal civil
Amende maximaleAmendes imposées par le tribunal de 1 à 10 UTM, ou de 10 à 50 UTM pour les données économiques, financières et commerciales…
Every requirement we score, with the rule in plain words and the section it comes from. Darker means more demanding. See every law side by side →
Portée et base légale
Portée extraterritoriale
0
No extraterritorial provision in the current text.Not addressed · secondary source · source ↗
Pre-reform Law 19,628 text in force on 18 Oct 2026. Law 21,719 (published 13 Dec 2024) rewrites it from 1 Dec 2026. The reformed law adds extraterritorial reach (not scored).
Base légale
3
Processing only when a law authorizes it or the holder expressly consents; narrow exceptions for public-source and certain internal data. No legitimate interests.Art. 4 · secondary source · source ↗
Pre-reform Law 19,628 text in force on 18 Oct 2026. Law 21,719 (published 13 Dec 2024) rewrites it from 1 Dec 2026. Law 21,719 adds further bases including legitimate interest.
Consentement
3
Consent must be express, informed about purpose and possible disclosure, and recorded in writing; revocation also in writing.Art. 4 · secondary source · source ↗
Pre-reform Law 19,628 text in force on 18 Oct 2026. Law 21,719 (published 13 Dec 2024) rewrites it from 1 Dec 2026.
Données sensibles
2
Sensitive data cannot be processed unless a law authorizes it, the holder consents, or it is needed to grant health benefits.Art. 10 · secondary source · source ↗
Pre-reform Law 19,628 text in force on 18 Oct 2026. Law 21,719 (published 13 Dec 2024) rewrites it from 1 Dec 2026.
Enfants
0
No child-specific rule or age threshold in the current text.Not addressed · secondary source · source ↗
Pre-reform Law 19,628 text in force on 18 Oct 2026. Law 21,719 (published 13 Dec 2024) rewrites it from 1 Dec 2026. Law 21,719 adds rules for children's data (not reviewed).
Droits des personnes
Droits
2
Information (access), modification, deletion and blocking; opposition to use for advertising, market research or surveys.Arts. 3, 12 · secondary source · source ↗
Pre-reform Law 19,628 text in force on 18 Oct 2026. Law 21,719 (published 13 Dec 2024) rewrites it from 1 Dec 2026. No portability or automated-decision right until the reform.
Délai de réponse aux demandes
3
Controller must respond within 2 business days, otherwise the holder may go to the civil court.Art. 16 · secondary source · source ↗
Pre-reform Law 19,628 text in force on 18 Oct 2026. Law 21,719 (published 13 Dec 2024) rewrites it from 1 Dec 2026.
Marketing
1
Holders may object to use of their data for advertising, market research or opinion surveys (opt-out).Art. 3 · secondary source · source ↗
Pre-reform Law 19,628 text in force on 18 Oct 2026. Law 21,719 (published 13 Dec 2024) rewrites it from 1 Dec 2026. Consumer Protection Law 19,496 also regulates promotional messages (not reviewed).
Gouvernance
DPO requis
–
Not addressedNot addressed · secondary source · source ↗
Pre-reform Law 19,628 text in force on 18 Oct 2026. Law 21,719 (published 13 Dec 2024) rewrites it from 1 Dec 2026. Decree 662 (2025) on voluntary compliance models under Law 21,719 provides for a prevention delegate.
Qualifications du DPO
–
Not addressedNot addressed · secondary source · source ↗
Pre-reform Law 19,628 text in force on 18 Oct 2026. Law 21,719 (published 13 Dec 2024) rewrites it from 1 Dec 2026.
Enregistrement
0
No registration for private controllers; the Civil Registry keeps a registry of public bodies' databases.Art. 22 · secondary source · source ↗
Pre-reform Law 19,628 text in force on 18 Oct 2026. Law 21,719 (published 13 Dec 2024) rewrites it from 1 Dec 2026. Law 21,719 directed the Civil Registry to delete this registry.
DPIA
0
No DPIA requirement in the current text.Not addressed · secondary source · source ↗
Pre-reform Law 19,628 text in force on 18 Oct 2026. Law 21,719 (published 13 Dec 2024) rewrites it from 1 Dec 2026.
Registres
0
No records-of-processing requirement in the current text.Not addressed · secondary source · source ↗
Pre-reform Law 19,628 text in force on 18 Oct 2026. Law 21,719 (published 13 Dec 2024) rewrites it from 1 Dec 2026.
Conservation
1
Data must be deleted or cancelled when storage lacks a legal basis or the data has expired.Art. 6 · secondary source · source ↗
Pre-reform Law 19,628 text in force on 18 Oct 2026. Law 21,719 (published 13 Dec 2024) rewrites it from 1 Dec 2026.
Violations
Informer le régulateur
0
No breach notification duty in the current text.Not addressed · secondary source · source ↗
Pre-reform Law 19,628 text in force on 18 Oct 2026. Law 21,719 (published 13 Dec 2024) rewrites it from 1 Dec 2026. Sectoral cyber-incident rules may apply separately.
Information des personnes
0
No duty to notify individuals in the current text.Not addressed · secondary source · source ↗
Pre-reform Law 19,628 text in force on 18 Oct 2026. Law 21,719 (published 13 Dec 2024) rewrites it from 1 Dec 2026.
Transferts
Transferts à l’étranger
0
No international transfer restriction in the current text.Not addressed · secondary source · source ↗
Pre-reform Law 19,628 text in force on 18 Oct 2026. Law 21,719 (published 13 Dec 2024) rewrites it from 1 Dec 2026. Law 21,719 adds transfer rules.
Localisation
0
No data localization requirement.Not addressed · secondary source · source ↗
Pre-reform Law 19,628 text in force on 18 Oct 2026. Law 21,719 (published 13 Dec 2024) rewrites it from 1 Dec 2026.
Application
Amende maximale
1
Court-imposed fines of 1 to 10 UTM, or 10 to 50 UTM for economic, financial and commercial data (about USD 3,500 at most).Art. 16 · secondary source · source ↗
Pre-reform Law 19,628 text in force on 18 Oct 2026. Law 21,719 (published 13 Dec 2024) rewrites it from 1 Dec 2026. Under Law 21,719 fines reach 20,000 UTM (about USD 1.4m) per Carey.
Responsabilité pénale
0
No criminal offenses in the data protection law.Not addressed · secondary source · source ↗
Pre-reform Law 19,628 text in force on 18 Oct 2026. Law 21,719 (published 13 Dec 2024) rewrites it from 1 Dec 2026.
Action privée
2
Controller must compensate material and moral damage from improper processing; amount set by the judge.Art. 23 · secondary source · source ↗
Pre-reform Law 19,628 text in force on 18 Oct 2026. Law 21,719 (published 13 Dec 2024) rewrites it from 1 Dec 2026.
Scores are our reading on the published rubric, checked 18 October 2026. Not legal advice.
Bibliothèque des réglementations
Toutes les lois des États américains sur la vie privée, sur une seule carte
24 États disposent d’une loi générale sur la vie privée dans la bibliothèque, aux côtés des lois de l’UE, du Royaume-Uni, des lois fédérales américaines et des lois du reste du monde : 102 au total, chacune expliquée en termes simples avec ses sources. Sélectionnez un État pour voir ce qui s’y applique.
- En vigueur
- Entrée en vigueur prochaine
- Lois sectorielles