What Is Ley N.º 21.719, que Regula la Protección y el Tratamiento de los Datos Personales?
Chile's official Ley Chile record identifies Law 21.719 as published 13 December 2024 and last modified 5 February 2026 by Law 21.806, with the current version carrying deferred validity from 1 December 2026. Until that commencement date, the pre-existing Law 19.628 remains the operative baseline — an important distinction for any description of Chile's current legal framework. The enacted text of Law 21.719 supports a bounded territorial and personal scope: it covers processing by natural or legal persons, including public bodies, reaches specified foreign offering or monitoring activity involving people in Chile, and excludes personal activities and protected expression/information activity. These are statutory-text findings about the future regime, not a claim that it is already operative. The enacted text separately provides access, rectification, suppression, opposition, and portability rights, with a 30-calendar-day response period (extendable by up to 30 more calendar days) and a 2-business-day temporary-blocking response rule. Current agency appointments, implementing regulations, complaint-portal availability, sector exceptions, and the amendment's full effects remain open questions ahead of the December 2026 commencement.
At a glance
- Full name
- Ley N.º 21.719, que Regula la Protección y el Tratamiento de los Datos Personales
- Short code
- Law 21.719
- Jurisdiction
- Chile
- Enacted
- 2024
- Last major update
- Published 13 December 2024, last modified 5 February 2026 by Law 21.806; current version has deferred validity from 1 December 2026
- Regulator
- Agencia de Protección de Datos Personales (future regulator; not yet operational in the 7 September 2026 review)
- Private right of action
- Limited
- Statutory citation
- Ley N.º 21.719 (Ley Chile / BCN)
Scope, who Law 21.719 covers
Protected data
Data subject rights
Access
Rectification
Suppression (cancellation/erasure)
Opposition
Portability
A 30-calendar-day general response deadline, extendable by up to 30 more calendar days
A 2-business-day response rule for temporary-blocking requests
Notable features
Chile's transition is a genuine two-law situation: the enacted Law 21.719 exists and has been amended (Law 21.806), but it carries deferred validity from 1 December 2026, so the older Law 19.628 remains the operative statute in the interim. Any current description of Chilean data-protection law must clearly separate what is enacted from what is currently in force.
Enforcement & penalties
Penalties: Not yet confirmed from the enacted text in the 7 September 2026 review; Law 21.719 creates a new Agencia de Protección de Datos Personales with enforcement powers, but its penalty schedule was not independently mapped in this pass and should be verified directly from the statute before publication.
Private right of action: Law 21.719 establishes the rights and a future Agencia de Protección de Datos Personales, but current agency appointments, complaint-portal availability, and enforcement procedure were not confirmed as operational in the 7 September 2026 review — the future Agency's complaint route should be reconfirmed closer to or after the December 2026 commencement date.
Relevance to data brokers
No jurisdiction-specific data-broker route has been confirmed in the 7 September 2026 review, for either the current Law 19.628 baseline or the future Law 21.719 regime. This and other route-specific claims require a dedicated review once the new Agencia de Protección de Datos Personales is operational.
Generate requests in under 60 seconds
Generate removal requests for 1,034 US/global profiles, $9
FAQ
Is Chile's new data-protection law, Law 21.719, already in force?+
Not yet, in the 7 September 2026 review. Law 21.719 was published 13 December 2024 and amended by Law 21.806, but the current version carries deferred validity from 1 December 2026. Until that date, the older Law 19.628 remains the operative statute.
What rights will Law 21.719 provide once it takes effect?+
The enacted text provides access, rectification, suppression, opposition, and portability rights, with a 30-calendar-day general response deadline (extendable by 30 more days) and a 2-business-day response rule for temporary-blocking requests.
Official sources & citations
Other international privacy regimes
Law 21.719 sits in a global ecosystem of data-protection laws. Compare with other jurisdictions that shape cross-border data flows: