Is your business ready for Chile's new data privacy law?
What is the new Chile Data Privacy Law?
Chile’s Ley 21.719, the Personal Data Protection Law, becomes fully enforceable on 1 December 2026. Every organisation that collects, stores, or processes personal data belonging to individuals in Chile must comply, regardless of where the business is headquartered.
Ley 21.719 introduces enforceable individual rights, mandatory breach notification, cross-border transfer rules, and a new independent supervisory authority (the Agencia de Protección de Datos de Chile). Non-compliance carries fines of up to 20,000 Unidades Tributarias Mensuales (UTM) for serious or very serious infractions.
Ley 21.719 requirement
What Ley 21.719 requires of your business
The law establishes seven individual rights that data subjects can exercise against your organisation at any time. PRECOGNIQ is Insightful Technology’s dedicated data privacy and data protection platform.
A request from an individual regarding their data tends to be called a data subject access request (DSAR) or a subject rights request (SRR).
Right | Ley 21.719 | How PRECOGNIQ covers It |
Right of Access | Art. 5° | Automated DSAR/SRR intake, identity verification, and report generation. Includes disclosure of origin, purpose, and retention period. |
Right to Rectification | Art. 6° | Workflow tools to locate, review, and correct inaccurate or outdated personal data across all connected data sources. |
Right to Erasure (Cancelación) | Art. 7° | End-to-end deletion workflows with audit trail. Supports the ‘Right to be Forgotten’ across multiple jurisdictions simultaneously. |
Right to Object | Art. 8° | Objection request workflows covering direct marketing opt-outs and compelling personal-reasons objections. |
Automated Decision-Making | Art. 8° bis | Flags and manages requests relating to decisions made solely by automated processing or AI profiling. |
Right to Restriction (Bloqueo) | Art. 8° ter | Processing suspension flags during dispute resolution, with automatic status tracking and notifications. |
Right to Portability | Art. 9° | Exports personal data in structured, commonly used electronic formats ready for transfer to another controller. |
Ley 21.719 – the solution
How PRECOGNIQ makes compliance manageable
From the moment a request arrives captures, categorises, and routes it automatically. Configurable intake forms and automated workflows dramatically reduce manual effort, cut processing time, and minimise the risk of missing a statutory deadline.
Ley 21.719 requires you to know what personal data you hold, where it is stored, and how long you may keep it. PRECOGNIQ’s automated data discovery and mapping capabilities run continuously across your connected data sources, keeping your Records of Processing Activities (ROPA) and Data Protection Impact Assessments (DPIA) current without manual intervention.
If your business operates across Chile, the EU, the US, or elsewhere, PRECOGNIQ manages compliance records across all jurisdictions in a single platform. One system handles GDPR, CCPA, and Ley 21.719 simultaneously.
When the Agencia de Protección de Datos requests evidence of your compliance programme, PRECOGNIQ generates regulatory-ready reports at the push of a button.
Before any personal data is disclosed, PRECOGNIQ verifies the identity of the data subject making the request.
Ley 21.719 fines
The Agencia de Protección de Datos de Chile is empowered to investigate complaints, conduct audits, and impose graduated sanctions:
- Minor infractions: fines up to 5,000 UTM
- Serious infractions: fines up to 10,000 UTM
- Very serious infractions: fines up to 20,000 UTM
Beyond financial penalties, the Agencia can suspend data processing activities, require independent audits, and revoke processing authorisations entirely. For organisations processing sensitive data (health records, biometric data, children’s data) the bar for scrutiny is higher.
The cost of being unprepared on 1 December 2026 is measurably higher than the cost of compliance today.
Purpose-built platform for Ley 21.719
Why businesses across Chile and the US choose PRECOGNIQ
- Purpose-built for DSAR and SRR handling not a bolt-on to another platform
- Proven across GDPR, CCPA, and HIPAA environments, Ley 21.719 compliance follows the same architecture
- SOC 2 Type 2 certified, ISO 27001 accredited, and Cyber Essentials Plus certified
- Configurable dashboards with full delegated task management
- Rapid deployment
- Dedicated customer success and compliance support team
- Connectors available direct into data sources for e-discovery
We’d be delighted to talk with you about your business and how we can help you automate your Ley 21.719 compliance.