On December 13, 2024, after seven years of deliberation, the new regulation on the Protection and Processing of Personal Data, which also establishes the Personal Data Protection Agency, was published in the Official Gazette.

This new regulation introduces substantial modifications to the existing Law No. 19.628 on the Protection of Private Life, raising the standard of protection by creating a supervisory authority, defining the exercise of rights by data subjects, establishing new legal basis for data processing, regulating international transfers, and instituting a robust regime of responsibilities and sanctions.

The Technology and Data Protection team of Barros & Errázuriz prepared a report on the main aspects involved in the approval of this new regulation. We invite you to review the sections of this edition, divided into:

1. Key Definitions
2. Territorial Scope
3. New obligations applicable to controllers
4. Lawfulness of processing
5. Data Protection Impact Assessment
6. Rights of Data Subjects
7. Personal Data transfer to third countries
8. Data Protection Agency
9. Infringements and Sanctions
10. National Registry of Sanctions and Compliance

We invite you to review the document by clicking here.