Law: Law No. 19.628 on the Protection of Private Life 1999 (only available in Spanish here) ('the Law')

Regulator: Currently, oversight is carried out by the Chilean Transparency Council ('CPLT').

Summary: The legal regime regarding privacy and data protection in Chile dates back to 1999, with legal reforms underway to modernise the Law and bring about increased protections for data subjects. Currently, Bill No. 11144-07 Regulating the Processing and Protection of Personal Data and Creating the Personal Data Protection Authority (only available in Spanish here) ('the Bill') is under discussion in the Chilean Senate, which takes inspiration from the EU's General Data Protection Regulation (Regulation (EU) 2016/679) ('GDPR'). 

In particular, the Bill would bring Chile in line with international standards by establishing rights for access, rectification, cancellation, or deletion of personal data, and data portability, as well as introducing new legal basis for data processing, and special categories of personal information. Lastly, Bill No. 14847-06 Establishing a Framework Law on Cybersecurity and Critical Information Infrastructure (only available in Spanish here) ('the Cybersecurity bill') is under discussion in the Chilean Senate. In particular, the Cybersecurity bill would regulate public and private institutions that possess critical information infrastructure and establish requirements associated with responses to cybersecurity incidents.