Página traduzida e verificada automaticamente. Prevalece a versão em inglês. Algumas partes ainda estão em inglês enquanto a tradução é verificada. Ver em inglês · Informar um erro de tradução
Regulamentações › Resto do mundo › Chile
LPVP
Lei 19,628 sobre a Proteção da Vida Privada, alterada pela Lei 21,719
QuandoEm vigor desde 28 de agosto de 1999
Quem fiscalizaAgência de Proteção de Dados Pessoais (a partir de 1º de dez. de 2026; até lá, a fiscalização cabe aos tribunais cíveis)
A quem se aplicaÓrgãos públicos e privados que tratam dados pessoais no Chile.
Avisar o reguladorSem dever de notificação de violações no texto atual
DPO obrigatórioNão tratado
RegistroSem registro para controladores privados
Transferências para o exteriorNenhuma restrição a transferências internacionais no texto atual
Prazo para solicitaçõesO controlador deve responder em até 2 dias úteis; caso contrário, o titular pode recorrer ao tribunal cível
Multa máximaMultas impostas judicialmente de 1 a 10 UTM, ou de 10 a 50 UTM para dados econômicos, financeiros e comerc…
Every requirement we score, with the rule in plain words and the section it comes from. Darker means more demanding. See every law side by side →
Alcance e base legal
Alcance extraterritorial
0
No extraterritorial provision in the current text.Not addressed · secondary source · source ↗
Pre-reform Law 19,628 text in force on 18 Oct 2026. Law 21,719 (published 13 Dec 2024) rewrites it from 1 Dec 2026. The reformed law adds extraterritorial reach (not scored).
Base legal
3
Processing only when a law authorizes it or the holder expressly consents; narrow exceptions for public-source and certain internal data. No legitimate interests.Art. 4 · secondary source · source ↗
Pre-reform Law 19,628 text in force on 18 Oct 2026. Law 21,719 (published 13 Dec 2024) rewrites it from 1 Dec 2026. Law 21,719 adds further bases including legitimate interest.
Consentimento
3
Consent must be express, informed about purpose and possible disclosure, and recorded in writing; revocation also in writing.Art. 4 · secondary source · source ↗
Pre-reform Law 19,628 text in force on 18 Oct 2026. Law 21,719 (published 13 Dec 2024) rewrites it from 1 Dec 2026.
Dados sensíveis
2
Sensitive data cannot be processed unless a law authorizes it, the holder consents, or it is needed to grant health benefits.Art. 10 · secondary source · source ↗
Pre-reform Law 19,628 text in force on 18 Oct 2026. Law 21,719 (published 13 Dec 2024) rewrites it from 1 Dec 2026.
Crianças
0
No child-specific rule or age threshold in the current text.Not addressed · secondary source · source ↗
Pre-reform Law 19,628 text in force on 18 Oct 2026. Law 21,719 (published 13 Dec 2024) rewrites it from 1 Dec 2026. Law 21,719 adds rules for children's data (not reviewed).
Direitos das pessoas
Direitos
2
Information (access), modification, deletion and blocking; opposition to use for advertising, market research or surveys.Arts. 3, 12 · secondary source · source ↗
Pre-reform Law 19,628 text in force on 18 Oct 2026. Law 21,719 (published 13 Dec 2024) rewrites it from 1 Dec 2026. No portability or automated-decision right until the reform.
Prazo para solicitações
3
Controller must respond within 2 business days, otherwise the holder may go to the civil court.Art. 16 · secondary source · source ↗
Pre-reform Law 19,628 text in force on 18 Oct 2026. Law 21,719 (published 13 Dec 2024) rewrites it from 1 Dec 2026.
Marketing
1
Holders may object to use of their data for advertising, market research or opinion surveys (opt-out).Art. 3 · secondary source · source ↗
Pre-reform Law 19,628 text in force on 18 Oct 2026. Law 21,719 (published 13 Dec 2024) rewrites it from 1 Dec 2026. Consumer Protection Law 19,496 also regulates promotional messages (not reviewed).
Governança
DPO obrigatório
–
Not addressedNot addressed · secondary source · source ↗
Pre-reform Law 19,628 text in force on 18 Oct 2026. Law 21,719 (published 13 Dec 2024) rewrites it from 1 Dec 2026. Decree 662 (2025) on voluntary compliance models under Law 21,719 provides for a prevention delegate.
Qualificações do DPO
–
Not addressedNot addressed · secondary source · source ↗
Pre-reform Law 19,628 text in force on 18 Oct 2026. Law 21,719 (published 13 Dec 2024) rewrites it from 1 Dec 2026.
Registro
0
No registration for private controllers; the Civil Registry keeps a registry of public bodies' databases.Art. 22 · secondary source · source ↗
Pre-reform Law 19,628 text in force on 18 Oct 2026. Law 21,719 (published 13 Dec 2024) rewrites it from 1 Dec 2026. Law 21,719 directed the Civil Registry to delete this registry.
DPIA
0
No DPIA requirement in the current text.Not addressed · secondary source · source ↗
Pre-reform Law 19,628 text in force on 18 Oct 2026. Law 21,719 (published 13 Dec 2024) rewrites it from 1 Dec 2026.
Registros
0
No records-of-processing requirement in the current text.Not addressed · secondary source · source ↗
Pre-reform Law 19,628 text in force on 18 Oct 2026. Law 21,719 (published 13 Dec 2024) rewrites it from 1 Dec 2026.
Retenção
1
Data must be deleted or cancelled when storage lacks a legal basis or the data has expired.Art. 6 · secondary source · source ↗
Pre-reform Law 19,628 text in force on 18 Oct 2026. Law 21,719 (published 13 Dec 2024) rewrites it from 1 Dec 2026.
Violações
Avisar o regulador
0
No breach notification duty in the current text.Not addressed · secondary source · source ↗
Pre-reform Law 19,628 text in force on 18 Oct 2026. Law 21,719 (published 13 Dec 2024) rewrites it from 1 Dec 2026. Sectoral cyber-incident rules may apply separately.
Informar as pessoas
0
No duty to notify individuals in the current text.Not addressed · secondary source · source ↗
Pre-reform Law 19,628 text in force on 18 Oct 2026. Law 21,719 (published 13 Dec 2024) rewrites it from 1 Dec 2026.
Transferências
Transferências para o exterior
0
No international transfer restriction in the current text.Not addressed · secondary source · source ↗
Pre-reform Law 19,628 text in force on 18 Oct 2026. Law 21,719 (published 13 Dec 2024) rewrites it from 1 Dec 2026. Law 21,719 adds transfer rules.
Localização de dados
0
No data localization requirement.Not addressed · secondary source · source ↗
Pre-reform Law 19,628 text in force on 18 Oct 2026. Law 21,719 (published 13 Dec 2024) rewrites it from 1 Dec 2026.
Fiscalização
Multa máxima
1
Court-imposed fines of 1 to 10 UTM, or 10 to 50 UTM for economic, financial and commercial data (about USD 3,500 at most).Art. 16 · secondary source · source ↗
Pre-reform Law 19,628 text in force on 18 Oct 2026. Law 21,719 (published 13 Dec 2024) rewrites it from 1 Dec 2026. Under Law 21,719 fines reach 20,000 UTM (about USD 1.4m) per Carey.
Responsabilidade criminal
0
No criminal offenses in the data protection law.Not addressed · secondary source · source ↗
Pre-reform Law 19,628 text in force on 18 Oct 2026. Law 21,719 (published 13 Dec 2024) rewrites it from 1 Dec 2026.
Ação privada
2
Controller must compensate material and moral damage from improper processing; amount set by the judge.Art. 23 · secondary source · source ↗
Pre-reform Law 19,628 text in force on 18 Oct 2026. Law 21,719 (published 13 Dec 2024) rewrites it from 1 Dec 2026.
Scores are our reading on the published rubric, checked 18 October 2026. Not legal advice.
Biblioteca de regulamentações
Todas as leis estaduais de privacidade dos EUA em um só mapa
24 estados têm uma lei abrangente de privacidade na biblioteca, ao lado das leis da UE, do Reino Unido, federais dos EUA e globais: 102 no total, cada uma explicada em linguagem simples com suas fontes. Selecione um estado para ver o que se aplica lá.
- Em vigor
- Entrando em vigor
- Leis setoriais