Law 21.719
New Personal Data Protection Law (Law 21.719)
Chile
Enacted 2024, taking effect in 2026
Americas
Who must comply
Any entity that processes personal data of individuals in Chile, including controllers and processors based abroad that target people in Chile.
Penalties
Fines scaled by severity, with serious infringements reaching up to roughly 20,000 UTM, equivalent to a substantial sum in Chilean pesos.
Key obligations
- Obtain free, informed, specific and unambiguous consent
- Identify a lawful basis for each processing activity
- Honor access, rectification, deletion, opposition and portability rights
- Notify data breaches to the agency and affected people
- Keep records and run impact assessments for high-risk processing
How ConsentX helps
Free and specific opt-in consent for trackers
Geo-aware banner for Chilean visitors
Full rights workflow including deletion and portability
Tamper-evident consent receipts
Region rule engine ready for the 2026 effective date
Get Law 21.719 ready with ConsentX
This page is a plain-English summary for general information and is not legal advice. Confirm your obligations with qualified local counsel.
How to comply with Law 21.719 using ConsentX
- 1
Scan your website
Run a free scan to find every cookie and tracker on your site, so you know exactly what needs consent under Law 21.719.
- 2
Show a geo-aware consent banner
Add the ConsentX banner. It detects each visitor region and shows the consent experience that Law 21.719 requires, automatically.
- 3
Block trackers until consent
Keep non-essential cookies and trackers blocked until the visitor agrees, so nothing fires before consent.
- 4
Record tamper-evident proof
Every choice is stored as a tamper-evident consent receipt you can produce in a Law 21.719 audit.
- 5
Handle data requests on time
Use the built-in DSAR workflow with SLA timers to answer access, deletion and opt-out requests within the legal deadline.
Frequently asked questions
When does Chile's new privacy law take effect?+
Law 21.719 was enacted in 2024 with a transition period, and its main obligations take effect in 2026.
Who will enforce Chile's new law?+
A new specialized Personal Data Protection Agency, the APDP, will supervise and enforce the regime.