Chilean government proposes delaying data protection law

The Chilean government has proposed postponing the implementation of the Personal Data Protection Law until December 2027.

The upcoming regulation will require all organizations, including small businesses and startups, to elevate their standards for managing and protecting personal information. Experts suggest that organizations must prioritize basic controls, such as understanding what data is collected, how it is used, and who has access to it.

Key recommendations for compliance include ensuring data usage has a clear and legitimate purpose, obtaining specific and separate consent for additional processing, and establishing strict access profiles and permissions to mitigate digital risks.