Skip to main content
Chile · Reviewed October 2026

What Is Ley N.º 21.719, que Regula la Protección y el Tratamiento de los Datos Personales?

Chile's official Ley Chile record identifies Law 21.719 as published 13 December 2024, with the current version carrying deferred validity from 1 December 2026. Until that commencement date, the pre-existing Law 19.628 remains the operative baseline — an important distinction for any description of Chile's current legal framework. In September 2026, the Ministry of Economy announced a proposal to postpone commencement to 1 December 2027 and extend implementation time; that proposal does not itself change the statutory commencement date. The enacted text of Law 21.719 supports a bounded territorial and personal scope: it covers processing by natural or legal persons, including public bodies, reaches specified foreign offering or monitoring activity involving people in Chile, and excludes personal activities and protected expression/information activity. These are statutory-text findings about the future regime, not a claim that it is already operative. The enacted text separately provides access, rectification, suppression, opposition, and portability rights, with a 30-calendar-day response period (extendable by up to 30 more calendar days) and a 2-business-day temporary-blocking response rule. Current agency appointments, implementing regulations, complaint-portal availability, sector exceptions, and the amendment's full effects remain open questions ahead of the statutory December 2026 commencement unless the pending proposal becomes law.

Rahul Kandoriya
Written byRahul Kandoriya·Founder, OfflistMe·Last updated October 12, 2026

At a glance

Full name
Ley N.º 21.719, que Regula la Protección y el Tratamiento de los Datos Personales
Short code
Law 21.719
Jurisdiction
Chile
Enacted
2024
Last major update
Published 13 December 2024, last modified 5 February 2026 by Law 21.806; current version has deferred validity from 1 December 2026
Regulator
Agencia de Protección de Datos Personales (future regulator; not yet operational as of the 9 October 2026 review; sanctioning functions begin with the law on 1 December 2026)
Private right of action
Limited

Scope, who Law 21.719 covers

Processing by natural or legal persons, including public bodies, established in Chile or connected to Chile; the enacted text also reaches specified foreign offering or monitoring activity involving people in Chile. Personal/domestic activities and protected expression or information activity are excluded. This describes the future regime under Law 21.719, not the currently operative Law 19.628.

Protected data

Personal data as defined in the enacted text of Law 21.719, once that law takes effect. The prior Law 19.628 remains the operative statute defining protected data until the December 2026 commencement date.

Data subject rights

Access

Rectification

Suppression (cancellation/erasure)

Opposition

Portability

A 30-calendar-day general response deadline, extendable by up to 30 more calendar days

A 2-business-day response rule for temporary-blocking requests

Notable features

Chile's transition is a genuine two-law situation: the enacted Law 21.719 exists and has been amended (Law 21.806), but it carries deferred validity from 1 December 2026, so the older Law 19.628 remains the operative statute in the interim. BCN's current summary says the future Agency's sanctioning functions begin in December 2026; this does not establish that the Agency is already operational on the review date. Any current description of Chilean data-protection law must clearly separate what is enacted from what is currently in force.

Enforcement & penalties

Regulator: Agencia de Protección de Datos Personales (future regulator; not yet operational as of the 9 October 2026 review; sanctioning functions begin with the law on 1 December 2026)

Penalties: Not yet confirmed from the enacted text in the 7 September 2026 review; Law 21.719 creates a new Agencia de Protección de Datos Personales with enforcement powers, but its penalty schedule was not independently mapped in this pass and should be verified directly from the statute before publication.

Private right of action: Law 21.719 establishes the rights and a future Agencia de Protección de Datos Personales, but current agency appointments, complaint-portal availability, and enforcement procedure were not confirmed as operational in the 7 September 2026 review — the future Agency's complaint route should be reconfirmed closer to or after the December 2026 commencement date.

Relevance to data brokers

No jurisdiction-specific data-broker route has been confirmed in the 7 September 2026 review, for either the current Law 19.628 baseline or the future Law 21.719 regime. This and other route-specific claims require a dedicated review once the new Agencia de Protección de Datos Personales is operational.

Generate requests in under 60 seconds

Explore 1,034 US/global data brokers

OfflistMe helps draft opt-out requests using the details you choose. Paid one-time plans start at $9 and include 5, 50 or 500 credits (1 credit = one run that generates removal requests for all available data brokers). Review the provider route and legal basis, then send from your own inbox. The tool is not legal advice and does not guarantee a broker's response.

FAQ

Is Chile's new data-protection law, Law 21.719, already in force?+

Not yet, as of the 12 October 2026 review. Law 21.719 was published 13 December 2024 and the current version carries deferred validity from 1 December 2026. The Ministry of Economy has proposed moving commencement to 1 December 2027, but that proposal is not current law. Until the statutory commencement date (unless changed by enacted legislation), the older Law 19.628 remains the operative statute; BCN's current summary places the Agency's sanctioning functions in the December 2026 start.

What rights will Law 21.719 provide once it takes effect?+

The enacted text provides access, rectification, suppression, opposition, and portability rights, with a 30-calendar-day general response deadline (extendable by 30 more days) and a 2-business-day response rule for temporary-blocking requests.

Official sources & citations

Other international privacy regimes

Law 21.719 sits in a global ecosystem of data-protection laws. Start with these comparative frameworks, or visit the privacy research hub for the complete jurisdiction index:

Related concepts & guides