On August 23rd, Chile enacted a new personal data protection Law, introducing significant changes to Law 19,628. Notably, the Law establishes key principles for the processing of personal data, introduces new grounds to legitimize processing, mandates the management of risk associated with personal information processing, outlines rights for data subjects, and establishes procedures to ensure compliance. Additionally, this new regulation creates the Personal Data Protection Agency, responsible for overseeing compliance with legal provisions in this area and enforcing sanctions as appropriate.
As a result, this reform, inspired by the European Union’s General Data Protection Regulation, will raise the standard of personal data protection in Chile, potentially leading to its recognition by the European Commission as a country with an adequate level of personal data protection.
