Published in the Official Gazette: New Personal Data Protection Law

On December 13, 2024, after seven years of deliberation, the new regulation on the Protection and Processing of Personal Data, which also establishes the Personal Data Protection Agency, was published in the Official Gazette.

This new regulation introduces substantial modifications to the existing Law No. 19.628 on the Protection of Private Life, raising the standard of protection by creating a supervisory authority, defining the exercise of rights by data subjects, establishing new legal basis for data processing, regulating international transfers, and instituting a robust regime of responsibilities and sanctions.

The Technology and Data Protection team of Barros & Errázuriz prepared a report on the main aspects involved in the approval of this new regulation. We invite you to review the sections of this edition, divided into:

1. Key Definitions
2. Ámbito de aplicación de la Ley
3. New obligations applicable to controllers
4. En qué casos se encuentra autorizado el tratamiento
5. Evaluación de impacto en la Protección de Datos Personales
6. Rights of Data Subjects
7. Personal Data transfer to third countries
8. Agencia de Protección de Datos Personales
9. Infringements and Sanctions
10. National Registry of Sanctions and Compliance

We invite you to review the document by clicking here.