What changed with Chile's Law 21.719?

Law 21.719, published in December 2024, replaces Chile's old framework with a modern GDPR-style law, creates a dedicated data protection agency, and introduces strong rights, breach notification, and fines up to 4 percent of revenue.

When does Chile's new privacy law take effect?

Law 21.719 has a phased entry into force, with full effect expected around 2026, giving organisations a transition period to comply.

Latin America & Caribbean

Cookie consent in Chile

Consent and privacy law in Chile

Chile overhauled its decades-old privacy framework with Law 21.719, published in December 2024, which creates a modern GDPR-style regime and a new data protection agency. The previous law lacked a dedicated regulator, so the new agency is a major change. Law 21.719 introduces clear legal bases, strengthened data subject rights, breach notification, and fines up to 4 percent of annual revenue for the most serious cases. It applies a phased entry into force, with full effect expected around 2026, so businesses have a transition window. Consent must be specific and informed, and privacy notices in Spanish are expected. Cookies that identify users are treated as personal data.

Authority

Agencia de Protección de Datos Personales (new under Law 21.719)

Status

Law 21.719 published in December 2024, with a phased entry into force around 2026

Primary law

Law 21.719

Languages

Español (Latinoamérica)

Who must comply

Law 21.719 applies broadly to the processing of personal data by natural and legal persons, including public bodies.

Penalties

Fines up to 4 percent of annual revenue for the most serious infringements

Key obligations

Process personal data in accordance with the principles established by the law
Identify and document the lawful basis for processing
Provide transparent information about personal-data processing
Collect and use data for specified and legitimate purposes
Process only data that is adequate, relevant and necessary
Keep personal data accurate, complete and up to date
Apply appropriate security measures
Maintain confidentiality of personal data
Delete or anonymise data when it is no longer required for the applicable purpose, subject to legal exceptions
Respect data subject rights
Establish procedures for handling privacy requests
Conduct appropriate risk assessments for qualifying processing activities
Apply additional safeguards to sensitive personal data
Implement requirements relating to automated decision-making and profiling
Apply appropriate safeguards for international data transfers
Maintain records and documentation necessary to demonstrate compliance
Notify and manage qualifying personal data security incidents in accordance with the applicable requirements

Local guidance

Prepare for Law 21.719, with full effect expected around 2026
Use specific and informed consent
Provide notices in Spanish
Watch for guidance from the new data protection agency

How ConsentX helps

Geo-aware consent management for Chilean visitors
Customisable privacy banners for different processing purposes
Consent and preference receipts to maintain evidence of user choices
Prior-script blocking to help control selected non-essential tracking technologies
Purpose-based consent controls for granular privacy preferences
Privacy preference centre for managing user choices
DSAR workflows to help organise data subject requests
Consent withdrawal mechanisms to support changing user preferences
Audit-ready records for consent and privacy interactions
Multi-jurisdictional controls for organisations operating across Chile and other privacy regimes

Get started free

yoursite.com

Chile

We value your privacy

We ask for your consent before any non-essential cookie, with the rules that apply in your region.

Allow allReject non-essentialManage preferences

Consent recorded

sha256 · chain ok

This page is a plain-English summary for general information and is not legal advice. Confirm your obligations with qualified local counsel.

Get Chile ready with ConsentX

Geo-aware banners, prior-script blocking, DSAR and tamper-evident evidence.

Get started free Book a demo

How to comply with Chile using ConsentX

1
Scan your website
Run a free scan to find every cookie and tracker on your site, so you know exactly what needs consent under Chile.
2
Show a geo-aware consent banner
Add the ConsentX banner. It detects each visitor region and shows the consent experience that Chile requires, automatically.
3
Block trackers until consent
Keep non-essential cookies and trackers blocked until the visitor agrees, so nothing fires before consent.
4
Record tamper-evident proof
Every choice is stored as a tamper-evident consent receipt you can produce in a Chile audit.
5
Handle data requests on time
Use the built-in DSAR workflow with SLA timers to answer access, deletion and opt-out requests within the legal deadline.