Página traducida y verificada automáticamente. Prevalece la versión en inglés. Algunas partes siguen en inglés mientras se verifica su traducción. Ver en inglés · Informar un error de traducción
Regulaciones › Resto del mundo › Chile
LPVP
Ley 19,628 sobre Protección de la Vida Privada, modificada por la Ley 21,719
CuándoEn vigor desde el 28 de agosto de 1999
Quién la aplicaAgencia de Protección de Datos Personales (desde el 1 de dic. de 2026; hasta entonces, los tribunales civiles hacen cumplir la ley)
A quién se aplicaOrganismos públicos y privados que tratan datos personales en Chile.
Informar al reguladorSin obligación de notificar violaciones en el texto vigente
DPO obligatorioNo se aborda
RegistroSin registro para responsables privados
Transferencias al extranjeroSin restricción a las transferencias internacionales en el texto vigente
Plazo de solicitudesEl responsable debe responder en un plazo de 2 días hábiles; de lo contrario, el titular puede acudir al juzgado civil
Multa máximaMultas impuestas por el tribunal de 1 a 10 UTM, o de 10 a 50 UTM para datos económicos, financieros y comerciales…
Every requirement we score, with the rule in plain words and the section it comes from. Darker means more demanding. See every law side by side →
Alcance y base jurídica
Alcance extraterritorial
0
No extraterritorial provision in the current text.Not addressed · secondary source · source ↗
Pre-reform Law 19,628 text in force on 18 Oct 2026. Law 21,719 (published 13 Dec 2024) rewrites it from 1 Dec 2026. The reformed law adds extraterritorial reach (not scored).
Base jurídica
3
Processing only when a law authorizes it or the holder expressly consents; narrow exceptions for public-source and certain internal data. No legitimate interests.Art. 4 · secondary source · source ↗
Pre-reform Law 19,628 text in force on 18 Oct 2026. Law 21,719 (published 13 Dec 2024) rewrites it from 1 Dec 2026. Law 21,719 adds further bases including legitimate interest.
Consentimiento
3
Consent must be express, informed about purpose and possible disclosure, and recorded in writing; revocation also in writing.Art. 4 · secondary source · source ↗
Pre-reform Law 19,628 text in force on 18 Oct 2026. Law 21,719 (published 13 Dec 2024) rewrites it from 1 Dec 2026.
Datos sensibles
2
Sensitive data cannot be processed unless a law authorizes it, the holder consents, or it is needed to grant health benefits.Art. 10 · secondary source · source ↗
Pre-reform Law 19,628 text in force on 18 Oct 2026. Law 21,719 (published 13 Dec 2024) rewrites it from 1 Dec 2026.
Niños
0
No child-specific rule or age threshold in the current text.Not addressed · secondary source · source ↗
Pre-reform Law 19,628 text in force on 18 Oct 2026. Law 21,719 (published 13 Dec 2024) rewrites it from 1 Dec 2026. Law 21,719 adds rules for children's data (not reviewed).
Derechos de las personas
Derechos
2
Information (access), modification, deletion and blocking; opposition to use for advertising, market research or surveys.Arts. 3, 12 · secondary source · source ↗
Pre-reform Law 19,628 text in force on 18 Oct 2026. Law 21,719 (published 13 Dec 2024) rewrites it from 1 Dec 2026. No portability or automated-decision right until the reform.
Plazo de solicitudes
3
Controller must respond within 2 business days, otherwise the holder may go to the civil court.Art. 16 · secondary source · source ↗
Pre-reform Law 19,628 text in force on 18 Oct 2026. Law 21,719 (published 13 Dec 2024) rewrites it from 1 Dec 2026.
Marketing
1
Holders may object to use of their data for advertising, market research or opinion surveys (opt-out).Art. 3 · secondary source · source ↗
Pre-reform Law 19,628 text in force on 18 Oct 2026. Law 21,719 (published 13 Dec 2024) rewrites it from 1 Dec 2026. Consumer Protection Law 19,496 also regulates promotional messages (not reviewed).
Gobernanza
DPO obligatorio
–
Not addressedNot addressed · secondary source · source ↗
Pre-reform Law 19,628 text in force on 18 Oct 2026. Law 21,719 (published 13 Dec 2024) rewrites it from 1 Dec 2026. Decree 662 (2025) on voluntary compliance models under Law 21,719 provides for a prevention delegate.
Requisitos del DPO
–
Not addressedNot addressed · secondary source · source ↗
Pre-reform Law 19,628 text in force on 18 Oct 2026. Law 21,719 (published 13 Dec 2024) rewrites it from 1 Dec 2026.
Registro
0
No registration for private controllers; the Civil Registry keeps a registry of public bodies' databases.Art. 22 · secondary source · source ↗
Pre-reform Law 19,628 text in force on 18 Oct 2026. Law 21,719 (published 13 Dec 2024) rewrites it from 1 Dec 2026. Law 21,719 directed the Civil Registry to delete this registry.
DPIA
0
No DPIA requirement in the current text.Not addressed · secondary source · source ↗
Pre-reform Law 19,628 text in force on 18 Oct 2026. Law 21,719 (published 13 Dec 2024) rewrites it from 1 Dec 2026.
Registros
0
No records-of-processing requirement in the current text.Not addressed · secondary source · source ↗
Pre-reform Law 19,628 text in force on 18 Oct 2026. Law 21,719 (published 13 Dec 2024) rewrites it from 1 Dec 2026.
Conservación
1
Data must be deleted or cancelled when storage lacks a legal basis or the data has expired.Art. 6 · secondary source · source ↗
Pre-reform Law 19,628 text in force on 18 Oct 2026. Law 21,719 (published 13 Dec 2024) rewrites it from 1 Dec 2026.
Violaciones de datos
Informar al regulador
0
No breach notification duty in the current text.Not addressed · secondary source · source ↗
Pre-reform Law 19,628 text in force on 18 Oct 2026. Law 21,719 (published 13 Dec 2024) rewrites it from 1 Dec 2026. Sectoral cyber-incident rules may apply separately.
Informar a las personas
0
No duty to notify individuals in the current text.Not addressed · secondary source · source ↗
Pre-reform Law 19,628 text in force on 18 Oct 2026. Law 21,719 (published 13 Dec 2024) rewrites it from 1 Dec 2026.
Transferencias
Transferencias al extranjero
0
No international transfer restriction in the current text.Not addressed · secondary source · source ↗
Pre-reform Law 19,628 text in force on 18 Oct 2026. Law 21,719 (published 13 Dec 2024) rewrites it from 1 Dec 2026. Law 21,719 adds transfer rules.
Localización
0
No data localization requirement.Not addressed · secondary source · source ↗
Pre-reform Law 19,628 text in force on 18 Oct 2026. Law 21,719 (published 13 Dec 2024) rewrites it from 1 Dec 2026.
Aplicación de la ley
Multa máxima
1
Court-imposed fines of 1 to 10 UTM, or 10 to 50 UTM for economic, financial and commercial data (about USD 3,500 at most).Art. 16 · secondary source · source ↗
Pre-reform Law 19,628 text in force on 18 Oct 2026. Law 21,719 (published 13 Dec 2024) rewrites it from 1 Dec 2026. Under Law 21,719 fines reach 20,000 UTM (about USD 1.4m) per Carey.
Responsabilidad penal
0
No criminal offenses in the data protection law.Not addressed · secondary source · source ↗
Pre-reform Law 19,628 text in force on 18 Oct 2026. Law 21,719 (published 13 Dec 2024) rewrites it from 1 Dec 2026.
Acción privada
2
Controller must compensate material and moral damage from improper processing; amount set by the judge.Art. 23 · secondary source · source ↗
Pre-reform Law 19,628 text in force on 18 Oct 2026. Law 21,719 (published 13 Dec 2024) rewrites it from 1 Dec 2026.
Scores are our reading on the published rubric, checked 18 October 2026. Not legal advice.
Biblioteca de regulaciones
Todas las leyes estatales de privacidad de EE. UU., en un mapa
24 estados tienen una ley integral de privacidad en la biblioteca, junto con las leyes de la UE, del Reino Unido, federales de EE. UU. y globales: 102 en total, cada una explicada en palabras sencillas con sus fuentes. Seleccione un estado para ver qué se aplica allí.
- En vigor
- Entrada en vigor
- Leyes sectoriales