Chile, Brazil and Paraguay advance AI laws

Chile opened the week with two legislative moves on data and artificial intelligence. The Chamber of Deputies approved the anti-deepfake bill in general and sent it back to the Future, Science, Technology, Knowledge and Innovation Committee. At the same time, the government introduced a proposal to delay by one year the general entry into force of Personal Data Protection Law No. 21.719.

What would change under Chile's anti-deepfake law?

The Chilean bill regulates content generated with artificial intelligence, requires that material to be labeled, sets a maximum 72-hour deadline to remove reported content, and requires platforms to have a legal representative in Chile. Oversight would fall to the future Personal Data Protection Agency.

According to G5Noticias and Mundo en Línea, the bill passed its general vote with 128 votes in favor, 2 against and 5 abstentions. It also adds a new digital integrity right covering image, body and voice, including after death, and provides fines ranging from 5,000 to 10,000 UTM for violations. The bill now continues through committee.

What is the Chilean government trying to delay?

The executive sent bill 18.623-07 to Congress to move the general effective date of Personal Data Protection Law No. 21.719 from December 1, 2026 to December 1, 2027. The postponement still needs parliamentary approval and publication in the Official Gazette.

That law recognizes rights of access, correction, deletion, objection, portability and blocking of personal data. The change would give regulated entities and the future regulatory framework an extra year to prepare.

How is the digital front moving in Ecuador and Mexico?

In Ecuador, the National Assembly is reviewing amendments to the Organic Law on Identity Management and Civil Data and to the Law of the National Public Data Registry System. The report for a first debate was approved unanimously by the Justice and State Structure Committee, with safeguards for personal data protection tied to both the physical and digital ID card.

The reforms seek to give the digital ID card the same legal value as the physical one and require public and private institutions to accept both formats. In Mexico, the Chamber of Deputies approved an opinion on the protection of children and adolescents in digital environments, with a focus on cyberbullying, digital violence and personal data protection, and sent it to the Senate, where it is still pending.

What is happening in Paraguay and Brazil?

Paraguay's Senate is debating a Critical Infrastructure Protection bill introduced by Senator José Oviedo. The proposal aims to identify, protect and strengthen the resilience of services whose disruption could affect national security, operational continuity and the population's well-being.

The text assigns Codena responsibility for physical critical infrastructure and Mitic for technological infrastructure. It also says the measures must respect fundamental rights and guarantees and, if they involve personal data processing, comply with current law. At the same time, Personal Data Protection Law No. 7593/2025 has already been enacted and published on November 27, 2025, creates a National Personal Data Protection Agency within Mitic, and sets fines that can reach 10,000 minimum daily wages.

Brazil still has bill PL 2338/2023 on artificial intelligence under review. The Senate approved it in December 2024 and sent it to the Chamber of Deputies in March 2025, where it is listed as awaiting the rapporteur's opinion. The bill seeks to regulate the use of AI systems and align the text with the LGPD and the European Union's risk-based approach.

What other rules are already in force in Brazil?

Law No. 15.211/2025, known as the Digital ECA, took effect on March 17, 2026 and already imposes obligations on social networks, video games, apps, video platforms, app stores and other technology services. It includes age verification, parental supervision, stronger default privacy settings and limits on targeted advertising and addictive features for minors.

The Ministry of Justice and Public Security also said regulatory decrees consolidated ANPD as the regulator with functional, technical, administrative and financial autonomy in the protection of minors' data. That same statement also noted the creation of a national policy for children's and adolescents' rights in the digital environment and a national center within the Federal Police.

Brazil's Congress has also seen a bill to reclassify social media profiling data as sensitive personal data, require express consent to build behavioral profiles, prohibit the use of legitimate interest as a legal basis, and ban the sale or sharing of those data with third parties for economic gain. The initiative, introduced by Fernanda Melchionna, has not yet been voted on.

What was archived in Ecuador?

The National Assembly shelved a bill regulating the use of artificial intelligence that had merged several proposals introduced between 2024 and 2025, using the European AI law as a reference. The text proposed classifying tools by risk, banning dangerous practices, requiring mandatory audits and setting rules for the use of personal data in training generative models.

It also designated MINTEL as the lead authority, gave the Personal Data Protection Superintendency sanctioning powers and created a National Council for Ethical and Algorithmic Governance. According to the cited reporting, it was rejected because it was considered to violate Article 135 of the Constitution by creating public spending without a presidential initiative.