After seven years of legislative processing, Congress passed into law the bill regulating personal data protection.
This Monday, August 26, the Chamber of Deputies approved the Mixed Committee report with 66 votes in favor, 22 against, and 36 abstentions.
The report had already been ratified in mid-August by the Senate, where the aim of the proposal is to update Chile’s personal data protection framework, which has been in force since 1999. The bill is expected to be enacted in the coming days by President Gabriel Boric.
What does it consist of?
The law seeks to regulate the manner and conditions under which personal data is processed, while raising protection standards in line with the European Union’s General Data Protection Regulation (GDPR).
It establishes a set of obligations for companies, including updating privacy policies, conducting audits of processes involving data processing, adopting technologies and measures to prevent violations, and implementing risk management practices.
The law establishes and regulates the rights of personal data subjects, including: access, rectification, deletion, objection, portability, and blocking of their personal data. It also defines the procedures and mechanisms for individuals to exercise these rights before data controllers.
Learn more about the details of the bill in the following document prepared by Maritza Marchant, Director of Consulting at CCL Auditores Consultores.