On July 24, 2024, the Joint Commission approved the bill amending Law 19.628 on the Protection of Personal Data in Chile, updating its regulatory framework in line with the European Union’s General Data Protection Regulation (GDPR).
Among the noteworthy aspects, the bill establishes the Data Protection Agency to ensure the effective protection of rights that guarantee privacy and personal data, with regulatory, supervisory, and sanctioning powers. Additionally, it will apply to individuals and entities that process personal data in Chile, establishing principles such as legality, purpose limitation, proportionality, and confidentiality. The lawful bases for data processing are expanded, and the rights of data subjects, such as access, rectification, deletion, and portability, are recognized.
Thus, Chile will become the fifth Latin American country to advance with legislation aligned with the GDPR.
