{"id":11569,"date":"2024-09-23T13:42:56","date_gmt":"2024-09-23T16:42:56","guid":{"rendered":"https:\/\/www.beckerabogados.cl\/en\/?p=11569"},"modified":"2024-09-23T13:50:48","modified_gmt":"2024-09-23T16:50:48","slug":"new-data-privacy-law-in-chile-what-you-need-to-know","status":"publish","type":"post","link":"https:\/\/www.beckerabogados.cl\/en\/blog\/new-data-privacy-law-in-chile-what-you-need-to-know\/","title":{"rendered":"New Data Privacy Law in Chile. What you need to know"},"content":{"rendered":"<p><span style=\"font-weight: 400;\">On August 26, 2024, Chile marked a significant milestone with the approval of the New Personal Data Protection Law, after seven years of parliamentary processing. This law strengthens the rights of data subjects and sets stricter regulations regarding the collection, processing, and protection of personal information.<\/span><\/p>\n<p><span style=\"font-weight: 400;\"><div class=\"row \"><div class=\"wpv-grid grid-1-1  wpv-first-level first unextended\" style=\"padding-top:0px;padding-bottom:0px\" id=\"wpv-column-0602c1a15dc0af03b4a5c5964629235b\" ><\/span><\/p>\n<p><span style=\"font-weight: 400;\">\n<div class=\"wpcf7 no-js\" id=\"wpcf7-f9612-o1\" lang=\"en-US\" dir=\"ltr\" data-wpcf7-id=\"9612\">\n<div class=\"screen-reader-response\"><p role=\"status\" aria-live=\"polite\" aria-atomic=\"true\"><\/p> <ul><\/ul><\/div>\n<form action=\"\/en\/wp-json\/wp\/v2\/posts\/11569#wpcf7-f9612-o1\" method=\"post\" class=\"wpcf7-form init\" aria-label=\"Contact form\" novalidate=\"novalidate\" data-status=\"init\">\n<fieldset class=\"hidden-fields-container\"><input type=\"hidden\" name=\"_wpcf7\" value=\"9612\" \/><input type=\"hidden\" name=\"_wpcf7_version\" value=\"6.1.5\" \/><input type=\"hidden\" name=\"_wpcf7_locale\" value=\"en_US\" \/><input type=\"hidden\" name=\"_wpcf7_unit_tag\" value=\"wpcf7-f9612-o1\" \/><input type=\"hidden\" name=\"_wpcf7_container_post\" value=\"0\" \/><input type=\"hidden\" name=\"_wpcf7_posted_data_hash\" value=\"\" \/><input type=\"hidden\" name=\"_wpcf7_recaptcha_response\" value=\"\" \/>\n<\/fieldset>\n<div class=\"row\">\n\t<div class=\"grid-1-3\">\n\t\t<p><span class=\"wpcf7-form-control-wrap\" data-name=\"name-507\"><input size=\"40\" maxlength=\"400\" class=\"wpcf7-form-control wpcf7-text wpcf7-validates-as-required\" aria-required=\"true\" aria-invalid=\"false\" placeholder=\"Name\" value=\"\" type=\"text\" name=\"name-507\" \/><\/span>\n\t\t<\/p>\n\t<\/div>\n\t<div class=\"grid-1-3\">\n\t\t<p><span class=\"wpcf7-form-control-wrap\" data-name=\"email-507\"><input size=\"40\" maxlength=\"400\" class=\"wpcf7-form-control wpcf7-email wpcf7-validates-as-required wpcf7-text wpcf7-validates-as-email\" aria-required=\"true\" aria-invalid=\"false\" placeholder=\"E-mail\" value=\"\" type=\"email\" name=\"email-507\" \/><\/span>\n\t\t<\/p>\n\t<\/div>\n\t<div class=\"grid-1-3\">\n\t\t<p><span class=\"wpcf7-form-control-wrap\" data-name=\"phone-507\"><input size=\"40\" maxlength=\"400\" class=\"wpcf7-form-control wpcf7-text wpcf7-validates-as-required\" aria-required=\"true\" aria-invalid=\"false\" placeholder=\"Phone\" value=\"\" type=\"text\" name=\"phone-507\" \/><\/span>\n\t\t<\/p>\n\t<\/div>\n\t<div class=\"grid-1-1\">\n\t\t<p><span class=\"wpcf7-form-control-wrap\" data-name=\"asunto-507\"><input size=\"40\" maxlength=\"400\" class=\"wpcf7-form-control wpcf7-text wpcf7-validates-as-required\" aria-required=\"true\" aria-invalid=\"false\" placeholder=\"Subject\" value=\"\" type=\"text\" name=\"asunto-507\" \/><\/span>\n\t\t<\/p>\n\t<\/div>\n\t<div class=\"grid-1-1\">\n\t\t<p><span class=\"wpcf7-form-control-wrap\" data-name=\"mensaje-507\"><textarea cols=\"40\" rows=\"6\" maxlength=\"2000\" class=\"wpcf7-form-control wpcf7-textarea wpcf7-validates-as-required\" aria-required=\"true\" aria-invalid=\"false\" placeholder=\"Case Description...\" name=\"mensaje-507\"><\/textarea><\/span>\n\t\t<\/p>\n\t<\/div>\n\t<div style= \"text-align: center;\">\n\t\t<p><input class=\"wpcf7-form-control wpcf7-submit has-spinner\" type=\"submit\" value=\"Send request \u2192\" \/>\n\t\t<\/p>\n\t<\/div>\n<\/div><div class=\"wpcf7-response-output\" aria-hidden=\"true\"><\/div>\n<\/form>\n<\/div>\n<\/span><\/p>\n<p><span style=\"font-weight: 400;\"><\/div><\/div><\/span><\/p>\n<h2><span style=\"font-weight: 400;\">Objectives of the New Personal Data Protection Law in Chile<\/span><\/h2>\n<p><span style=\"font-weight: 400;\">The new law, set to take effect in October or November 2024, aims to provide both businesses and citizens with a modern legal framework ensuring that personal data is treated with the respect and care it deserves. It seeks to align Chile\u2019s data protection standards with those of the European Union\u2019s General Data Protection Regulation (GDPR).<\/span><\/p>\n<p><span style=\"font-weight: 400;\">To achieve this, the law introduces significant changes to the rights of data subjects and the obligations of companies and organizations that handle personal data. Below is a summary of the law\u2019s key aspects:<\/span><\/p>\n<h3><span style=\"font-weight: 400;\">Creation of the Personal Data Protection Agency<\/span><\/h3>\n<p><span style=\"font-weight: 400;\">One of the most notable features of the law is the creation of the Personal Data Protection Agency. This independent and decentralized body will oversee compliance with the law, resolve complaints from data subjects, and enforce penalties for violations.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">The agency will also manage the National Registry of Sanctions and Compliance, a public database documenting sanctions imposed on those responsible for data processing. This could have serious reputational consequences for companies involved in violations.<\/span><\/p>\n<h3><span style=\"font-weight: 400;\">Expanded Rights for Data Subjects<\/span><\/h3>\n<p><span style=\"font-weight: 400;\">The law significantly expands the rights of individuals over their personal data. Key rights include:<\/span><\/p>\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><b>Right of Access:<\/b><span style=\"font-weight: 400;\"> Individuals can request information on what personal data has been collected and how it is being used.<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><b>Right to Rectification:<\/b><span style=\"font-weight: 400;\"> Data subjects can correct any incorrect or outdated information.<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><b>Right to Erasure:<\/b><span style=\"font-weight: 400;\"> Individuals can request the deletion of their data when it is no longer necessary.<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><b>Right to Data Portability:<\/b><span style=\"font-weight: 400;\"> People can obtain a copy of their data in a format that allows it to be transferred to another entity.<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><b>Right to Object to Automated Decisions:<\/b><span style=\"font-weight: 400;\"> Data subjects can challenge decisions made solely through automated processes, such as credit scoring or job performance evaluations.<\/span><\/li>\n<\/ul>\n<p><span style=\"font-weight: 400;\">Organizations will have 30 days to respond to these requests, or data subjects can file a complaint with the Personal Data Protection Agency.<\/span><\/p>\n<h3><span style=\"font-weight: 400;\">Territorial Scope<\/span><\/h3>\n<p><span style=\"font-weight: 400;\">The law covers a wide territorial scope, regulating data processing in several scenarios, such as:<\/span><\/p>\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">When the data controller or processor is located in Chile.<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">When the processor, even if located outside Chile, processes data on behalf of a controller based in Chile.<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">When foreign organizations handle data for offering goods or services to individuals in Chile.<\/span><\/li>\n<\/ul>\n<p><span style=\"font-weight: 400;\">Foreign organizations must designate a contact email to receive communications from Chilean data subjects and the Personal Data Protection Agency.<\/span><\/p>\n<h2><span style=\"font-weight: 400;\">Legal Bases for Data Processing<\/span><\/h2>\n<p><span style=\"font-weight: 400;\">The law states that, as a general rule, personal data processing must be based on the explicit consent of the data subject. However, it also recognizes other legal bases, such as compliance with legal obligations, the execution of contracts, and the legitimate interest of the controller, provided that fundamental rights are not infringed.<\/span><\/p>\n<h3><span style=\"font-weight: 400;\">Key Principles for Data Processing<\/span><\/h3>\n<p><span style=\"font-weight: 400;\">The law outlines several fundamental principles that guide data processing:<\/span><\/p>\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><b>Lawfulness and Fairness:<\/b><span style=\"font-weight: 400;\"> Controllers must ensure that the data processing is legal.<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><b>Purpose Limitation:<\/b><span style=\"font-weight: 400;\"> Data must be collected and processed for the specific purposes communicated to the data subject.<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><b>Data Minimization:<\/b><span style=\"font-weight: 400;\"> Only the necessary data should be processed.<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><b>Accuracy:<\/b><span style=\"font-weight: 400;\"> Data must be accurate, complete, and kept up to date.<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><b>Security:<\/b><span style=\"font-weight: 400;\"> Organizations must implement appropriate security measures to protect data from unauthorized access or incidents.<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><b>Confidentiality:<\/b><span style=\"font-weight: 400;\"> Those handling the data must maintain its confidentiality and take necessary steps to safeguard it.<\/span><\/li>\n<\/ul>\n<h3><span style=\"font-weight: 400;\">Impact Assessments<\/span><\/h3>\n<p><span style=\"font-weight: 400;\">When data processing presents a high risk to the rights of individuals, an impact assessment must be conducted. This is especially relevant for cases involving mass or sensitive data processing. If high risks are identified, the data controller may consult the Personal Data Protection Agency before proceeding.<\/span><\/p>\n<h3><span style=\"font-weight: 400;\">International Data Transfers<\/span><\/h3>\n<p><span style=\"font-weight: 400;\">The new law also regulates international data transfers, allowing them only in the following cases:<\/span><\/p>\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Transfers to countries with adequate levels of protection, as determined by the Personal Data Protection Agency.<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Transfers based on contracts with adequate safeguards to protect the data.<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Transfers with the explicit consent of the data subject or to comply with international legal obligations.<\/span><\/li>\n<\/ul>\n<h2><span style=\"font-weight: 400;\">Penalties for Non-compliance<\/span><\/h2>\n<p><span style=\"font-weight: 400;\">The penalties for violating the New Personal Data Protection Law are substantial, varying based on the severity of the offense:<\/span><\/p>\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><b>Minor violations<\/b><span style=\"font-weight: 400;\"> (e.g., failure to provide information): A written warning or fines up to 5,000 UTM (approximately USD 387,000).<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><b>Serious violations<\/b><span style=\"font-weight: 400;\"> (e.g., processing data without legal grounds): Fines up to 10,000 UTM (approximately USD 775,000).<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><b>Very serious violations<\/b><span style=\"font-weight: 400;\">: Fines up to 20,000 UTM (approximately USD 1,550,000) or 4% of a company&#8217;s annual revenue. These apply when data is processed fraudulently or maliciously.<\/span><\/li>\n<\/ul>\n<p><span style=\"font-weight: 400;\">In case of repeated violations, fines can increase up to three times the original amount. For very serious offenses, the Personal Data Protection Agency may suspend the organization\u2019s data processing activities for up to 30 days.<\/span><\/p>\n<h2><span style=\"font-weight: 400;\">Preparing for the New Personal Data Protection Law<\/span><\/h2>\n<p><span style=\"font-weight: 400;\">With the law expected to take effect in late 2024, it will fundamentally change how organizations handle personal data in Chile.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Whether you are an individual concerned about your data rights or a business responsible for processing data, now is the time to adjust your policies and practices. At Becker Abogados, our team specializes in this new data protection legislation and can help you comply with all the requirements. Contact us today for expert guidance to safeguard your data and ensure compliance with the law.<\/span><\/p>\n<p><span style=\"font-weight: 400;\"><div class=\"row \"><div class=\"wpv-grid grid-1-1  wpv-first-level first unextended\" style=\"padding-top:0px;padding-bottom:0px\" id=\"wpv-column-9b6f6def5a7e158b3dae35d614265649\" ><\/span><\/p>\n<p><span style=\"font-weight: 400;\">\n<div class=\"wpcf7 no-js\" id=\"wpcf7-f9612-o2\" lang=\"en-US\" dir=\"ltr\" data-wpcf7-id=\"9612\">\n<div class=\"screen-reader-response\"><p role=\"status\" aria-live=\"polite\" aria-atomic=\"true\"><\/p> <ul><\/ul><\/div>\n<form action=\"\/en\/wp-json\/wp\/v2\/posts\/11569#wpcf7-f9612-o2\" method=\"post\" class=\"wpcf7-form init\" aria-label=\"Contact form\" novalidate=\"novalidate\" data-status=\"init\">\n<fieldset class=\"hidden-fields-container\"><input type=\"hidden\" name=\"_wpcf7\" value=\"9612\" \/><input type=\"hidden\" name=\"_wpcf7_version\" value=\"6.1.5\" \/><input type=\"hidden\" name=\"_wpcf7_locale\" value=\"en_US\" \/><input type=\"hidden\" name=\"_wpcf7_unit_tag\" value=\"wpcf7-f9612-o2\" \/><input type=\"hidden\" name=\"_wpcf7_container_post\" value=\"0\" \/><input type=\"hidden\" name=\"_wpcf7_posted_data_hash\" value=\"\" \/><input type=\"hidden\" name=\"_wpcf7_recaptcha_response\" value=\"\" \/>\n<\/fieldset>\n<div class=\"row\">\n\t<div class=\"grid-1-3\">\n\t\t<p><span class=\"wpcf7-form-control-wrap\" data-name=\"name-507\"><input size=\"40\" maxlength=\"400\" class=\"wpcf7-form-control wpcf7-text wpcf7-validates-as-required\" aria-required=\"true\" aria-invalid=\"false\" placeholder=\"Name\" value=\"\" type=\"text\" name=\"name-507\" \/><\/span>\n\t\t<\/p>\n\t<\/div>\n\t<div class=\"grid-1-3\">\n\t\t<p><span class=\"wpcf7-form-control-wrap\" data-name=\"email-507\"><input size=\"40\" maxlength=\"400\" class=\"wpcf7-form-control wpcf7-email wpcf7-validates-as-required wpcf7-text wpcf7-validates-as-email\" aria-required=\"true\" aria-invalid=\"false\" placeholder=\"E-mail\" value=\"\" type=\"email\" name=\"email-507\" \/><\/span>\n\t\t<\/p>\n\t<\/div>\n\t<div class=\"grid-1-3\">\n\t\t<p><span class=\"wpcf7-form-control-wrap\" data-name=\"phone-507\"><input size=\"40\" maxlength=\"400\" class=\"wpcf7-form-control wpcf7-text wpcf7-validates-as-required\" aria-required=\"true\" aria-invalid=\"false\" placeholder=\"Phone\" value=\"\" type=\"text\" name=\"phone-507\" \/><\/span>\n\t\t<\/p>\n\t<\/div>\n\t<div class=\"grid-1-1\">\n\t\t<p><span class=\"wpcf7-form-control-wrap\" data-name=\"asunto-507\"><input size=\"40\" maxlength=\"400\" class=\"wpcf7-form-control wpcf7-text wpcf7-validates-as-required\" aria-required=\"true\" aria-invalid=\"false\" placeholder=\"Subject\" value=\"\" type=\"text\" name=\"asunto-507\" \/><\/span>\n\t\t<\/p>\n\t<\/div>\n\t<div class=\"grid-1-1\">\n\t\t<p><span class=\"wpcf7-form-control-wrap\" data-name=\"mensaje-507\"><textarea cols=\"40\" rows=\"6\" maxlength=\"2000\" class=\"wpcf7-form-control wpcf7-textarea wpcf7-validates-as-required\" aria-required=\"true\" aria-invalid=\"false\" placeholder=\"Case Description...\" name=\"mensaje-507\"><\/textarea><\/span>\n\t\t<\/p>\n\t<\/div>\n\t<div style= \"text-align: center;\">\n\t\t<p><input class=\"wpcf7-form-control wpcf7-submit has-spinner\" type=\"submit\" value=\"Send request \u2192\" \/>\n\t\t<\/p>\n\t<\/div>\n<\/div><div class=\"wpcf7-response-output\" aria-hidden=\"true\"><\/div>\n<\/form>\n<\/div>\n<\/span><\/p>\n<p><span style=\"font-weight: 400;\"><\/div><\/div><\/span><\/p>\n","protected":false},"excerpt":{"rendered":"<p>On August 26, 2024, Chile marked a significant milestone with the approval of the New Personal Data Protection Law, after seven years of parliamentary processing. This law strengthens the rights of data subjects and sets stricter regulations regarding the collection, processing, and protection of personal information. Objectives of the New Personal Data Protection Law in&#8230;<\/p>\n","protected":false},"author":6,"featured_media":11571,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[2],"tags":[],"class_list":["post-11569","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-civil-law"],"_links":{"self":[{"href":"https:\/\/www.beckerabogados.cl\/en\/wp-json\/wp\/v2\/posts\/11569","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.beckerabogados.cl\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.beckerabogados.cl\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.beckerabogados.cl\/en\/wp-json\/wp\/v2\/users\/6"}],"replies":[{"embeddable":true,"href":"https:\/\/www.beckerabogados.cl\/en\/wp-json\/wp\/v2\/comments?post=11569"}],"version-history":[{"count":4,"href":"https:\/\/www.beckerabogados.cl\/en\/wp-json\/wp\/v2\/posts\/11569\/revisions"}],"predecessor-version":[{"id":11573,"href":"https:\/\/www.beckerabogados.cl\/en\/wp-json\/wp\/v2\/posts\/11569\/revisions\/11573"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.beckerabogados.cl\/en\/wp-json\/wp\/v2\/media\/11571"}],"wp:attachment":[{"href":"https:\/\/www.beckerabogados.cl\/en\/wp-json\/wp\/v2\/media?parent=11569"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.beckerabogados.cl\/en\/wp-json\/wp\/v2\/categories?post=11569"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.beckerabogados.cl\/en\/wp-json\/wp\/v2\/tags?post=11569"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}