South America · Data protection

Chile: Law 19.628 on Protection of Private Life (updated) and what it requires

Law 19.628 on Protection of Private Life (updated): a law that is enacted or being phased in, with enforcement practice still maturing. Overseen by Not centrally designated in source material.

Reference last verified 2026-09.

Key requirements at a glance

Registration with the regulatorNot required
Data protection officerNot required
Breach notificationNo fixed hourly deadline in our reference
Cross-border transfer restrictionsNot required
Data localizationNot required

Penalties and enforcement

Administrative penalties under the current Law; a comprehensive replacement bill is progressing.

What to know in practice

A new, more comprehensive data protection bill is in progress and expected to modernize the regime.

How Cevro helps

  • Maps Law 19.628 on Protection of Private Life (updated) to the rest of your compliance program, so evidence collected for SOC 2 or ISO 27001 also counts here where it overlaps.
  • Gives every failing control a specific fix and a way to re-check it.

Frequently asked questions

Who regulates data protection in Chile?

Not centrally designated in source material oversees Law 19.628 on Protection of Private Life (updated).

Is breach notification mandatory under Law 19.628 on Protection of Private Life (updated)?

Our reference does not record a fixed hourly deadline for Law 19.628 on Protection of Private Life (updated). Check the statute and Not centrally designated in source material guidance for the notification timing that applies to you.

Does Chile restrict cross-border data transfers?

Our reference records no general restriction on cross-border transfers, although sector rules and contracts can still apply.

Do you need a data protection officer under Law 19.628 on Protection of Private Life (updated)?

It is not a general requirement in our reference, though naming an accountable person is still good practice.

What are the penalties for non-compliance in Chile?

Administrative penalties under the current Law; a comprehensive replacement bill is progressing.

Related jurisdictions: South America

Read: Data protection checklist for new markets

Informational reference only, not legal advice. Compiled from a September 2026 source reviewing primary data-protection statutes; laws change and enforcement practice evolves. Verify current requirements with qualified local counsel before relying on this for an actual compliance decision.