Chile's New Data Protection Law Spurs Cybersecurity and AI Compliance Push

Chile is preparing for the implementation of its new Personal Data Protection Law (Ley N°21.719), which will take effect on 1 December 2026. The legislation creates a Data Protection Agency, imposes fines of up to 20,000 UTM for serious breaches, and requires organisations to review contracts, internal policies, data inventories and security protocols.

Companies are responding by strengthening cybersecurity measures and adopting ethical AI guidelines. Professionals such as María Francisca Daniels, a consultant in governance, risk and compliance, are helping firms develop policies, procedures and controls to meet the law’s requirements and to protect personal information. The law is also driving demand for flexible legal talent, with firms hiring project‑based lawyers and compliance specialists to manage the surge in regulatory work without expanding permanent staff.

The broader national agenda links the data‑protection law to Chile’s cybersecurity strategy and an emerging AI strategy, emphasizing the need for coordinated investment, threat‑intelligence sharing and responsible AI development across sectors.