Skip to Main Content
Main Menu
Search Opener
Search Close
Contact us
Regulation

Chile – Personal Data Protection Law (PDPL) 19628

The Chile – Personal Data Protection Law (PDPL) is a comprehensive law that regulates the collection, processing, and storage of personal information in public and private databases. It aims to promote the protection of personal information processed in Chile and gives rights to individuals regarding their personal information.

Are you subject to PDPL?

The Chile – PDPL applies to public and private organizations that regulate personal and sensitive data of identified and identifiable individuals.Compliance with the law is mandatory for any organization collecting or processing the personal data of Chilean residents.

Obligations & Rights under the Chile PDPL

Consent

Organizations are required to obtain explicit and informed consent from individuals before processing personal data. The consent must be freely given, specific, and revocable at any time.

Policies & notices

Organizations must inform individuals of the processing purpose and of any possible public disclosure of their personal information.

Individual rights & requests

The law provides data subjects the right to access, rectify, delete, block, and object to processing of personal data in certain cases.

Data security

Organizations must implement measures to protect personal data and take responsibility for damages.

Webinar

CBPR – Navigating Cross-Border Data Privacy Compliance

Learn about the framework and the benefits when it comes to cross-border transfer data requirements.

Achieve compliance

Data Inventory Hub & Risk Profile

Complete and maintain a data inventory

Automate with a Data Inventory Hub. Save time and reduce risk with automated data flow mapping, risk analysis, and remediation for personal data processes and general activities associated.
Assessment Manager

Mitigate risks

Use pre-built DPIAs and vendor assessments to mitigate risks with TrustArc’s Assessment Manager.

Individual Rights Manager

Exercising individual rights

DSAR automation with Individual Rights Manager – operationalizes individual rights by providing most current individual rights under a specific jurisdiction, acuration workflow, recording-keeping of requests/actions and customized reports.

FAQs

  • What is personal information and sensitive personal information?

    Personal information is any information relating to an identified or identifiable natural person. Examples include a first and last name, email address, or phone number.

    Sensitive data refers to the physical or moral characteristics of people or to facts or circumstances of their private life or privacy, such as personal habits, racial origin, ideologies and political opinions, beliefs or religious convictions, physical or psychic health states and sexual life.

  • What are the requirements of data controllers on the use of credit information?

    Under Chile PDPL, organizations must ensure that credit information is not disclosed unless it is information regarding a failed payment of an economic, financial, banking, or commercial character, or an overdue mortgage payment.

  • Can individuals object to direct marketing under Chile PDPL?

    Individuals have the right to object to the use of their personal information collected through surveys, market studies or public opinion for advertising, market research, or opinion polling.

Related resources

View all resources

The information provided does not, and is not intended to, constitute legal advice. Instead, all information, content, and materials presented are for general informational purposes only.

Back to Top