Chile delays Data Protection Law 21,719

Update October 22, 2026: Chile's Senate Constitution Committee unanimously approved the bill to delay Law 21,719 until Dec. 1, 2027. The proposal also increases the board of the future Personal Data Protection Agency from three to five members, and the government said it will move immediately to continue the article-by-article debate.

Chile's Senate Constitution Committee unanimously approved an executive bill that seeks to push back the start of Law 21,719 on personal data protection and processing until Dec. 1, 2027. The measure also changes the governance structure of the future Personal Data Protection Agency, while leaving the law's substantive obligations unchanged.

What did the Constitution Committee approve?

Chile's Senate Constitution Committee unanimously approved, in general, the idea of moving forward with a bill that delays the law's entry into force and adjusts the structure of the future Personal Data Protection Agency. After the vote, the government committed to immediately file an urgency request to keep the article-by-article debate moving, according to the Chilean Senate.

The proposal, backed by the executive branch, is meant to give companies and public agencies more time to adapt and to allow the future agency to issue the rules it needs. According to the Chilean Senate and Diario Financiero, the bill was introduced on Sept. 1 and is moving in parallel on both the effective date and the agency's governance.

What changes in the law's effective date?

The bill explicitly proposes delaying Law 21,719's effective date until Dec. 1, 2027, without changing the law's substantive obligations. While the bill remains under review, the original legal date stays set for Dec. 1, 2026, according to the Inter American Press Association.

During the debate, JDF Jara del Favero said two formulas were discussed. One was a full delay until Dec. 1, 2027, defended by undersecretary Karlfranz Koehler. The other was a phased rollout proposed by Felipe Harboe, under which rights and substantive rules would take effect on Dec. 1, 2026, while the agency's enforcement and sanctioning powers would be postponed by one year.

What happens with the Personal Data Protection Agency?

The initiative increases the future Personal Data Protection Agency's board from three to five members and sets staggered partial renewals every two years, according to Diario Financiero. The change is aimed at organizing the agency's governance before it begins operating fully.

The bill also gives the agency more time to issue its rules and gives organizations more time to adapt to the new regime. Radio Atacama warned that if the change is not approved, the law would keep its original schedule and includes fines of up to 1.443 billion Chilean pesos.

How does the legislative debate stand?

The delay has not been definitively approved yet, because the bill is still moving through Congress. Surtika and Gerencia Legal had already been tracking the status of bill 18.623-07 in a debate that resurfaced after the issue was placed on Chile's legislative agenda.

An analysis by Varela Abogados argues that the proposal is meant to give extra time to set up the future agency and help organizations adapt, though it notes that everything still depends on congressional approval. In that context, Chile is still debating when and how its new data law will take effect.

What does the new Argentine bill propose?

The Argentine bill aims to modernize the country's data protection law and bring it closer to GDPR standards, according to LexLatin. The interview on the initiative describes a broad reform, but the materials provided here do not detail its specific articles or its exact status in the legislative process.

LexLatin published an interview titled "Personal data protection in Argentina: what the new bill proposes and how it moves closer to GDPR standards," which confirms that the core of the proposal is to update the current framework. Based on the information available, what can be verified is the general direction of the reform and its alignment with European standards, not a specific article-by-article text.

What is known about the Brazilian bill?

Brazil's Federal Senate has Bill No. 3780 of 2023, listed in the legislative process as a measure tied to the handling of data used by AI systems. The official Senate record identifies the initiative, although the material received for this story does not include its specific provisions or the exact point it has reached.

At minimum, the file shows that Brazil's debate is already formalized in Congress and that the issue is part of the legislative discussion on data and automation. The source available is Brazil's Federal Senate itself.

Why is Chile's law still under debate?

In Chile, the debate centers on the postponement of Law 21,719 and the status of bill 18.623-07, according to Surtika and Gerencia Legal's Oct. 13, 2026 legislative update. The available material shows that the effective date has not been definitively settled and that the issue is still under legislative review.

An analysis cited by G5 Noticias says, without independent official confirmation in the materials provided, that the delay is mainly due to an institutional problem. That explanation points to the Personal Data Protection Agency not yet being fully in place, after a slate for its board was rejected.

What happened with the cybersecurity initiative reported by República?

According to República, the cybersecurity bill returned to Congress's agenda to move toward a first reading. The coverage said a committee issued a favorable report with amendments on Sept. 28 and that a technical working group was agreed upon to review changes, although final approval was not guaranteed.

That detail is not independently confirmed in the additional material, but it does appear as a concrete legislative step in the cited coverage. In the same regional update, movement in Chile and proceedings in Brazil and Argentina show active agendas on data protection and cybersecurity.