Skip to Main Content
Main Menu

Chile – Personal Data Protection Law (PDPL) 19628

The Chile – Personal Data Protection Law (PDPL) is a comprehensive law that regulates the collection, processing, and storage of personal information in public and private databases. It aims to promote the protection of personal information processed in Chile and gives rights to individuals regarding their personal information.

Are you subject to PDPL?

The Chile – PDPL applies to public and private organizations that regulate personal and sensitive data of identified and identifiable individuals.Compliance with the law is mandatory for any organization collecting or processing the personal data of Chilean residents.

Obligations & Rights under the Chile PDPL


Organizations are required to obtain explicit and informed consent from individuals before processing personal data. The consent must be freely given, specific, and revocable at any time.

Policies & notices

Organizations must inform individuals of the processing purpose and of any possible public disclosure of their personal information.

Individual rights & requests

The law provides data subjects the right to access, rectify, delete, block, and object to processing of personal data in certain cases.

Data security

Organizations must implement measures to protect personal data and take responsibility for damages.


CBPR – Navigating Cross-Border Data Privacy Compliance

Learn about the framework and the benefits when it comes to cross-border transfer data requirements.

Achieve compliance


  • What is personal information and sensitive personal information?

    Personal information is any information relating to an identified or identifiable natural person. Examples include a first and last name, email address, or phone number.

    Sensitive data refers to the physical or moral characteristics of people or to facts or circumstances of their private life or privacy, such as personal habits, racial origin, ideologies and political opinions, beliefs or religious convictions, physical or psychic health states and sexual life.

  • What are the requirements of data controllers on the use of credit information?

    Under Chile PDPL, organizations must ensure that credit information is not disclosed unless it is information regarding a failed payment of an economic, financial, banking, or commercial character, or an overdue mortgage payment.

  • Can individuals object to direct marketing under Chile PDPL?

    Individuals have the right to object to the use of their personal information collected through surveys, market studies or public opinion for advertising, market research, or opinion polling.

The information provided does not, and is not intended to, constitute legal advice. Instead, all information, content, and materials presented are for general informational purposes only.

Back to Top