LPVP

Law 19,628 on the Protection of Private Life, as amended by Law 21,719

In force privacy

WhenIn effect since 28 August 1999

Who enforces itAgencia de Protección de Datos Personales (from 1 Dec 2026; civil courts enforce until then)

Who it applies toPublic and private bodies that process personal data in Chile.

Tell the regulatorNo breach notification duty in the current text DPO requiredNot addressed RegistrationNo registration for private controllers Transfers abroadNo international transfer restriction in the current text Request deadlineController must respond within 2 business days, otherwise the holder may go to the civil court Maximum fineCourt-imposed fines of 1 to 10 UTM, or 10 to 50 UTM for economic, financial and commercial dat…

If you already comply with

86%

of Chile's 21 requirements are already met by European Union (GDPR). Here is what LPVP adds, biggest gaps first.

Lawful basisReach and lawful basisBig gap

GDPR1 Six lawful bases, including consent, contract, legal obligation, vital interests, public task and legitimate interests.

LPVP adds3 Processing only when a law authorizes it or the holder expressly consents; narrow exceptions for public-source and certain internal data. No legitimate interests. Art. 4 · source ↗

ConsentReach and lawful basisGap

GDPR2 Consent must be freely given, specific, informed and unambiguous by clear affirmative action, and the controller must be able to demonstrate it.

LPVP adds3 Consent must be express, informed about purpose and possible disclosure, and recorded in writing; revocation also in writing. Art. 4 · source ↗

Request deadlinePeople's rightsGap

GDPR2 Respond within one month, extendable by two further months for complex or numerous requests.

LPVP adds3 Controller must respond within 2 business days, otherwise the holder may go to the civil court. Art. 16 · source ↗

Already covered by GDPR: Reach abroad, Sensitive data, Children, Rights, Marketing, DPO required, DPO qualifications, Registration, DPIA, Records, Retention, Tell the regulator, Tell people, Transfers abroad, Localization, Maximum fine, Criminal liability, Private action.

A gap means LPVP is more demanding than GDPR on that requirement, on our 0 to 3 scale (how we score). Read the cited section before acting. Not legal advice.

Regulations library

Every US state privacy law, on one map

24 states have a comprehensive privacy law in the library, alongside the EU, UK, US federal and global laws: 102 in all, each explained in plain words with its sources. Select a state to see what applies there.

Explore the map Follow Regulatory Watch

In force
Coming into force
Sector laws

AK ME VT NH WA ID MT ND MN IL WI MI NY RI MA OR NV WY SD IA IN OH PA NJ CT CA UT CO NE MO KY WV VA MD DE AZ NM KS AR TN NC SC DC OK LA MS AL GA HI TX FL