Chile：数据保护法、网络犯罪、罚款与刑罚
Two layers: the Cybersecurity Framework Law (ANCI, in force since 2025) and the new data Law 21.719, due 1 Dec 2026, with a proposed delay to 2027.
- Law
- Ley 21.719 (personal data) and Ley 21.663 (Ley Marco de Ciberseguridad)
- Authority
- Agencia de Protección de Datos Personales and ANCI (cybersecurity)
- Max fine
- Law 21.719: up to 20,000 UTM or 4% of revenue (repeat offense); Law 21.663: up to 40,000 UTM for OIVs
- Breach notification
- ANCI: early warning in 3h, preliminary report in 72h (24h for OIVs), final report in 15 days
- DPO
- —
Crimes
| Computer crimes (unlawful access, interception, computer fraud, receiving stolen data) | Ley 21.459/2022 | — |
Risks
- Dual layer of duties: cybersecurity (ANCI) and personal data
- Uncertainty over Law 21.719's start date (delay to 1 Dec 2027 proposed)
- Designation as an OIV (stricter fines and deadlines)
- 3-hour early-warning deadline to the ANCI
- ANCI has supervised and sanctioned since 1 Mar 2025
- Government bill expands the Data Agency board from 3 to 5 members (Senate, Sep 2026)
来源: Garrigues – Agencia de Datos · Emol – aplazamiento · Cuatrecasas – Ley 21.663 · Prey Project – Ley 21.663 · BCN – Ley 21.459